popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46621 2020-08-31 09:33 http://eroshop.co.kr/  

74dda40d261365ef87b498e4b640025e


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit crashed 		7 11 4.0 guest

46622 2020-08-31 09:04 eelwa5JvqA67zEd.exe  

0958fcbcca524cdd4888c56eb6c8fe9a


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		9.6 M 48 guest

46623 2020-08-31 08:59 7QiZqwAr00008898776.exe  

6eea2a7d4dab95a75aad2561ee4744f7


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 4 7.4 28 guest

46624 2020-08-31 08:13 http://facanha.com.br/temp/fil...  

325b19f13059fe1b33b503b0223b70ff


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		3 8 13.6 M guest

46625 2020-08-31 08:08 http://facanha.com.br/temp/fil...  

2786e3c5bce967d4658a2e048146e670


VirusTotal Malware suspicious privilege Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs human activity check Windows Exploit DNS crashed 		1 1 8.2 M guest

46626 2020-08-31 07:46 http://www.hairlineunisexsalon...  

30399283cd0ee3b49d730f4a6d70c5f5


VirusTotal Malware AutoRuns Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Exploit Advertising ComputerName DNS Cryptographic key crashed 		3 5 11.6 23 guest

46627 2020-08-30 21:48 s6LMDKmJzIeeSUFGna.exe  

dd3142ceb94ee1a392353d3a41932b2a


Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 6.0 guest

46628 2020-08-30 15:21 lr.exe  

d0f98c84fc52468726d3f807e0cab1f6


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 7.4 M 20 guest

46629 2020-08-30 14:51 OXhYYv1Fyr.exe  

a4513379dad5233afa402cc56a8b9222


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 2 6.8 M 23 guest

46630 2020-08-30 09:40 Payment status.doc  

223975e6f03f5cc32074a00e82f8cf99


VirusTotal Malware Malicious Traffic unpack itself DNS 		2 3 4.8 M 25 guest

46631 2020-08-30 09:24 http://godtving.com/  

41aa4b5b2c1dd8898fb5fe98f52b1b28


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit crashed 		17 17 4.0 guest

46632 2020-08-30 09:19 W_952655721352.doc  

d8d2efbdc39fdf5c2ab1ac103b086013


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		2 3 5.4 M 29 guest

46633 2020-08-30 09:14 http://provence.anmyondo.co.kr...  

6b9e1cc512993376f2777923345f15cb


Code Injection unpack itself Windows utilities malicious URLs Windows DNS 		2 3 3.2 guest

46634 2020-08-29 14:43 Invoice 009453913.doc  

33be4c05626a25a449d335917a581a7d


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		4 7 5.8 26 guest

46635 2020-08-29 14:36 zxcvb.exe  

ca71563b7ac88247b3b0210b71cc50b6


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Ransomware Windows Browser Email ComputerName DNS Software 		16 6 23.6 M 24 guest

keyword