popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46891 2020-08-03 14:02 .dbshell  

7b7030422b5d86e33b3b8a994aa029d1


Email Client Info Stealer suspicious privilege Check memory Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Browser Email ComputerName DNS 		2 1 5.8

46892 2020-08-03 09:44 node-v12.18.0-x64.msi  

e3f6617be3157b28ffee007e5d2790d2


Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VM Disk Size Check ComputerName DNS 		2 1 5.0

46893 2020-08-03 09:19 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Windows DNS 		6 2 3.6

46894 2020-08-02 11:48 http://admaris.ir/izux/izux.ex...  


VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Windows 		2.8

46895 2020-08-02 09:52 QVlCRxo8a95Iso8A.exe  

bf6658495ca7778bb10a7faaabf8fdf1


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 6 8.0 M 23

46896 2020-08-02 09:44 tt9y69.exe  

024b18c095db760ba3ec51b916fd0dee


Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 2 6.6

46897 2020-08-02 09:28 jKVanZ57DCE2.exe  

605e9924577d249ba6ad9deba82ae510


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Browser Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 8 8.6 M 42

46898 2020-08-02 09:27 invoice_114122100.doc  

2e26cdb457a9a300f09115c349043d81


VirusTotal Malware exploit crash unpack itself Exploit DNS crashed 		1 1 4.0 28

46899 2020-08-01 14:52 imgpaper.png.exe  

245d06009f069d06cff6f73d4d629b9a


Malware suspicious privilege Malicious Traffic buffers extracted unpack itself malicious URLs ComputerName DNS 		2 7 6.2

46900 2020-08-01 14:51 R6F2tWxe8pgjkj9eel.exe  

75152fd71345281cfabfe764447eb373


unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 2 5.2

46901 2020-08-01 14:51 asdfg.exe  

2983b011d132fe58ae6f372c735c1287


Emotet VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Ransomware Interception Windows Browser Tor Email ComputerName DNS Cryptographic key crashed 		14 7 28.0 M 47

46902 2020-08-01 14:47 FriKanya.exe  

9b65bdf577ccfeacc1abb78248f96fc4


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		12.4 M 28

46903 2020-08-01 14:38 w389sj9hy67262919.exe  

8058468a4a0feb416e752d519c4155b5


Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 2 6.4 M

46904 2020-08-01 14:38 rc.exe  

24c2540e588585a4daf8b3fe1112a78d


Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself AppData folder malicious URLs Interception Windows DNS 		2 4 12.8 M 10

46905 2020-08-01 09:27 hoga.exe  

cdf6c228fdadc71c3d1765cb110eca43


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs crashed 		3.6 M 20

keyword