popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48481 2020-07-20 23:34 https://aliyousefpoor.com/wp-a...  

51fe38a980f41111074aabdde5ee5124


Dridex VirusTotal Malware Malicious Traffic Tofsee DNS 		2 4 3 2.4 M

48482 2020-07-20 23:31 http://124.160.126.238/11.exe  

5d2e9716be941d7c77c05947390de736


Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency AutoRuns Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit DNS crashed 		4 4 7 10.8 M 57

48483 2020-07-20 22:18 http://124.160.126.238/tq.exe  

9450249ae964853a51d6b55cd55c373e


Malware download VirusTotal Cryptocurrency Miner Malware Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs WriteConsoleW Windows Exploit DNS crashed Downloader 		4 12 7 9.4 M

48484 2020-07-20 22:10 http://salesforce-ibmcloud.koz...  

4a3b3aa0b72d467be7321ceac9d3db92


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		3 5 2 12.4 15

48485 2020-07-20 22:10 http://pycssltsdywinnersintern...  

5ce5eb588e9e7e0a52c1666fbb1f96ed


VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed Downloader 		1 1 3 6.4 M 29

48486 2020-07-20 22:08 http://salesforce-ibmcloud.koz...  

a4195bdf6d0f782598f69bc40c4d7e50


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		6 5 3 17.0 M 22

48487 2020-07-20 22:08 http://salesforce-ibmcloud.koz...  

3e444097a710ba080d921004e26ae08a


VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit DNS crashed 		1 1 1 11.6

48488 2020-07-20 18:31 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

48489 2020-07-20 17:46 https://robotica.cl/w3ZunC4T3N...  

6186934d6ebcbd2761413698113233cf


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 6 3 4.6

48490 2020-07-20 17:45 https://www.gomlab.com/downloa...  

04a1b261477eff216d800437c6d613fd


Dridex Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		30 6 3 4.2

48491 2020-07-20 16:59 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 9 2 14.4

48492 2020-07-20 16:53 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware Code Injection RWX flags setting unpack itself Windows utilities Windows 		2 2.6

48493 2020-07-20 16:45 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Ransomware Interception Windows Exploit Browser ComputerName DNS crashed 		8 9 2 14.2

48494 2020-07-20 16:39 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 8 3 4.6

48495 2020-07-20 16:36 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Dridex Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 8 3 4.6

keyword