popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47821 2020-06-30 14:04 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47822 2020-06-30 13:53 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47823 2020-06-30 13:51 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47824 2020-06-30 13:50 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47825 2020-06-30 13:49 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47826 2020-06-30 13:46 3e9f05acde528ea5fd7ca9d0c2af0e...  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check human activity check installed browsers check Ransomware Windows Browser Email ComputerName DNS 		40 7 22.8 44

47827 2020-06-30 13:46 asdfg.exe  

b726f090cc523eaa9861ca0c9a748493


Browser Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Windows Browser Email ComputerName 		20 3 18.4 44

47828 2020-06-30 12:59 http://www.nalara1220.o-r.kr/x...  

5851a6dc7297cea2a29e70e0482a5fd0


Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		8 7 4.2

47829 2020-06-30 12:46 https://cdn1.estsecurity.com/s...  


Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 6 4.2

47830 2020-06-30 11:51 https://cdn1.estsecurity.com/s...  


Code Injection exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 6 3.8

47831 2020-06-30 11:48 https://cdn1.estsecurity.com/s...  


Code Injection exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 6 3.8

47832 2020-06-30 11:44 https://cdn1.estsecurity.com/s...  


Code Injection exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 7 3.8

47833 2020-06-30 11:43 https://cdn1.estsecurity.com/s...  


Code Injection exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 7 3.8

47834 2020-06-30 11:39 https://cdn1.estsecurity.com/s...  


Code Injection exploit crash unpack itself Windows utilities Windows Exploit crashed 		2 7 3.8

47835 2020-06-30 11:35 https://cdn1.estsecurity.com/s...  

f809c38f0febca37c04811e2dc51ff8e


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed 		2 6 4.6 1

keyword