popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48436 2020-07-22 12:37 INVOICE LXQ977_276688832.doc  

14d86378e0250e64120d6985bd846056


Vulnerability VirusTotal Malware unpack itself 		2.4 18

48437 2020-07-22 12:37 Inv ET5808_565971217.doc  

e83403331092ea4ebf89495eb3823deb


Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 4.2 19

48438 2020-07-22 12:33 http://systemidentifytheprotoc...  

374fb48a959a96ce92ae0e4346763293


Malware download FTP Client Info Stealer VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit Trojan DNS Software crashed Downloader 		1 1 4 7.6 4

48439 2020-07-22 12:33 http://systemidentifytheprotoc...  

16dc050b380c8161b7973a01b8c7b879


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName Trojan DNS Cryptographic key Software crashed 		3 3 4 15.6 8

48440 2020-07-22 11:16 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

48441 2020-07-22 11:09 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		7 3 3 4.6

48442 2020-07-22 10:22 http://braxmedia.nl/test/invoi...  

d418ef78fa11b92cd7b01bbe0a90d3cf


VirusTotal Malware DNS 		4 1 1.4

48443 2020-07-21 18:29 http://t-lawadvisors.com/aviso...  

7159a277e9012d98d6877c5efe6c4ba7


VirusTotal Malware suspicious privilege Code Injection buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit ComputerName DNS crashed 		1 2 1 9.0 39

48444 2020-07-21 18:27 https://class.britishonline.co...  

02032a73a8b1788cdcc567b749812444


Dridex VirusTotal Malware Code Injection Malicious Traffic unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		2 3 3 4.4

48445 2020-07-21 18:18 F_UUW_070120_VNF_072120.doc  

0cd06145a71c3f2bab7722fd5788579d


Emotet Malware download Vulnerability VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 5 6 5.4 20

48446 2020-07-21 18:18 https://bloomcareltd.co.uk/wp-...  

85321df51c43c38d4bc6927ee7cea7a9


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 3 3.2

48447 2020-07-21 18:17 FILE-2020_07_21-195317.doc  

589ee490769a1737f7365d7c5655008e


Vulnerability Malware Malicious Traffic unpack itself Tofsee Windows DNS 		4 4 3 3.6

48448 2020-07-21 14:29 doc-5382.docm  

ae18ed686e82ba41cebc162245c7fc42


VirusTotal Malware unpack itself 		1.2 M 20

48449 2020-07-21 14:28 doc-5382.docm  

ae18ed686e82ba41cebc162245c7fc42


VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 3.0 20

48450 2020-07-21 14:23 doc-5382.docm  

ae18ed686e82ba41cebc162245c7fc42


VirusTotal Malware Malicious Traffic unpack itself Tofsee DNS 		2 2 1 3.0 20

keyword