popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46906 2020-08-01 09:26 asdf.EXE  

6ebc441b966301fb0df9e020409349b4


Browser Info Stealer Emotet FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Disables Windows Security Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW anti-virtualization VM Disk Size Check human activity check installed browsers check Ransomware Interception Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		25 7 32.4 M 44

46907 2020-08-01 09:21 dZ.exe  

79bb776ffd56712e981eeaa0224ac0f6


unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 4.2 M

46908 2020-08-01 08:53 a77IOgQPqa.exe  

68f5c88b79ffcf7baa3d78274d0d49df


unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 3.6

46909 2020-08-01 08:53 2i5s94855.exe  

ea3e257cf963759c2e7696515cc72e78


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 2 7.0 11

46910 2020-08-01 08:44 64248813.doc  

8a07f84450c39b2a25c346b8c15e047f


Vulnerability VirusTotal Malware unpack itself 		2.6 29

46911 2020-07-31 18:07 DOC99281270.exe  

361528c897da241e893c868878a98dea


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.4 17

46912 2020-07-31 17:28 .mongorc.js  

d41d8cd98f00b204e9800998ecf8427e


malicious URLs 		0.8

46913 2020-07-31 17:25 .ICEauthority  

6b2b5093099a571f41b44ba1cc2beaa4


Email Client Info Stealer suspicious privilege Check memory Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Browser Email ComputerName DNS 		2 2 5.8

46914 2020-07-31 17:23 .ICEauthority  

6b2b5093099a571f41b44ba1cc2beaa4


Email Client Info Stealer suspicious privilege Check memory Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Browser Email ComputerName DNS 		2 1 5.8

46915 2020-07-31 17:21 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Windows DNS 		6 2 3.6

46916 2020-07-31 17:18 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Windows Exploit crashed 		7 7 4.0

46917 2020-07-31 17:05 .wget-hsts  

b502618545ce9e7223b499c0c322bd95


Email Client Info Stealer suspicious privilege Check memory Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Browser Email ComputerName DNS 		2 1 5.8

46918 2020-07-31 16:57 0001.jpg  

e921de1cce7dbb1252285e2b4f18f74a


malicious URLs 		0.8

46919 2020-07-31 16:53 0001.jpg  

e921de1cce7dbb1252285e2b4f18f74a


malicious URLs 		0.8

46920 2020-07-31 16:52 build-black-18dp.svg  

cbcc2c67b20a62d35280155863b60829


Browser Info Stealer MachineGuid Code Injection Checks debugger buffers extracted WMI unpack itself malicious URLs sandbox evasion installed browsers check Browser DNS 		3 9.0

keyword