popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48406 2020-07-22 22:45 nDGG7uAL7NbhjRK.exe  

94f5d57d1bb59e0d46ef9d2f46c438db


unpack itself Detects VirtualBox malicious URLs Windows 		2.4

48407 2020-07-22 19:48 견적서20200702,pdf.exe  

3b9887f9f9ff50f1c1862b654dea0b80


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.8 31

48408 2020-07-22 19:42 nDGG7uAL7NbhjRK.exe  

94f5d57d1bb59e0d46ef9d2f46c438db


unpack itself Detects VirtualBox malicious URLs Windows 		2.4

48409 2020-07-22 19:22 nDGG7uAL7NbhjRK.exe  

1e3b01b7f5bd3507a06f034d50282184


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.0 53

48410 2020-07-22 19:05 견적서20200702,pdf.exe  

3b9887f9f9ff50f1c1862b654dea0b80


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.8 31

48411 2020-07-22 19:02 hng1vO2Fj7G.exe  

44c8313f848ac01a0c6871129bb89ca6


Emotet Malware download Malware Report Check memory unpack itself malicious URLs sandbox evasion Interception Windows Advertising ComputerName Remote Code Execution DNS Cryptographic key 		1 1 3 5.6

48412 2020-07-22 19:00 cursor.png.exe  

bbf3d850aef940c9a2bb54ef2fd4bd09


Report suspicious privilege buffers extracted RWX flags setting unpack itself malicious URLs ComputerName DNS 		3 2 5.6

48413 2020-07-22 18:58 rep_20200722_7381.doc  

66f91fd92420954ea537d19687ef4709


Vulnerability VirusTotal Malware unpack itself 		2.4 15

48414 2020-07-22 18:31 rep_20200722_7381.doc  

66f91fd92420954ea537d19687ef4709


VirusTotal Malware 		0.6 15

48415 2020-07-22 16:37 http://dmm555.com/  

698666557066b83279baf873968067b6


Malware Code Injection Malicious Traffic buffers extracted wscript.exe payload download Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs Tofsee Windows Exploit DNS crashed 		9 7 2 14.4

48416 2020-07-22 16:01 Rep-2020_07_22-27528.doc  

5daf4caf65c9cb99afcc98de4b5e1fcb


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 4.4 20

48417 2020-07-22 15:53 http://slacktracks.com/private...  

b5f4ecf1a13b7ef894523c990b963a84


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		2 2 3 11.8 M 53

48418 2020-07-22 15:52 http://198.23.213.30/word.exe  

c016c1bdb8995100702bd07d1108b886


VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		2 2 4 5.2

48419 2020-07-22 15:26 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 8 3 4.6

48420 2020-07-22 15:21 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 8 3 4.6

keyword