popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
47956 2020-06-25 15:55 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself 		1.8 3

47957 2020-06-25 15:32 http://hzhuafengdq.cn/content/...  

e443b6913685380f9b2716cbb9d2ed60


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		34 6 4.6

47958 2020-06-25 15:30 온라인+학술대회+한시적+지원+관련+Q&A.hwp...  

257a81471a001af1fa0d82069c92993c


VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself 		1.8 3

47959 2020-06-25 15:24 http://hzhuafengdq.cn/content/...  

e443b6913685380f9b2716cbb9d2ed60


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		34 6 4.6

47960 2020-06-25 15:11 202006091658_c90a72e11f1ff6cad...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself Remote Code Execution 		1.2

47961 2020-06-25 15:08 202006091658_c90a72e11f1ff6cad...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself Remote Code Execution 		1.2

47962 2020-06-25 15:08 http://office-services-sec.com...  

3fe1e1b56b127dd61ebf330b827a458d


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

47963 2020-06-25 15:01 b37cdeed56f98ddb4a507ff7d273fa...  

71743b62964b6634da810d13b413501f


Checks debugger unpack itself malicious URLs Remote Code Execution 		2.0

47964 2020-06-25 14:58 crimea.ps1  

b07c04d53312dd24935701ac700cc8a5


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		2 2 9.0 9

47965 2020-06-25 14:56 crimea.ps1  

b07c04d53312dd24935701ac700cc8a5


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		2 2 9.0 9

47966 2020-06-25 14:40 http://office-services-sec.com...  

a87a313263697c3f81881defa55b269c


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

47967 2020-06-25 14:33 http://office-services-sec.com...  

1d0e1d24ad35a2357af094b32e1cb25a


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit crashed 		6 6 5.2 13

47968 2020-06-25 14:03 https://cdn1.estsecurity.com/s...  

599168bde854ae6d22a9cc5df5a3c0e2


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed 		2 7 5.0

47969 2020-06-25 12:55 http://37.49.230.204/ABU.exe  

4c097af29449e5d1e6cf77a9c58b2968


VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		4 5 6.8 15

47970 2020-06-25 11:31 http://37.49.230.204/ABU.exe  

7bec956dcddd39b40c88debf266e291a


VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		4 5 7.2 15

keyword