popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48946 2020-07-20 09:45 tesseract-ocr-w64-setup-v5.0.0...  

42b41c07df3890dc9e9c1bb1908585cc


VirusTotal Malware MachineGuid Creates shortcut AppData folder malicious URLs installed browsers check Browser 		3.0 2

48947 2020-07-20 09:38 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted heapspray Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Tofsee Interception Windows Exploit Browser ComputerName DNS crashed 		8 4 3 14.2

48948 2020-07-20 09:30 https://www.naver.com/  

64bea819af27c133c9ef30cf3a0b6a9a


Malware Code Injection Malicious Traffic heapspray Creates executable files unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		181 12 31 5.0

48949 2020-07-17 17:28 http://mp3-tools.com/downloads...  

b4d654755e5fb496138ed0e9c4121e84


Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities AppData folder AntiVM_Disk VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName DNS 		17 2 7.0

48950 2020-07-17 15:17 V3Lite_Setup.exe  

f58e441518481320578611e5dfa7f4b4


MachineGuid Check memory WMI Creates executable files unpack itself suspicious process AppData folder malicious URLs sandbox evasion Windows ComputerName 		6.8

48951 2020-07-17 14:30 http://bsskillwsdyemmulatorsde...  

ddaff9daff983a3a13f51eff8a6f17bc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 15 14.6 M

48952 2020-07-17 14:27 https://angelsdetour.com/mscwo...  

d150e39d9782a0bfff4a8c44a188e33c


Dridex VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 4 3.2 M

48953 2020-07-17 14:26 http://sevea-fr.com/july13o.ex...  

0bb3bf0a178fcc963a51ee4f39ecb20d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed 		2 2 2 15.2 M 46

48954 2020-07-17 14:24 http://bsskillwsdyemmulatorsde...  

ddaff9daff983a3a13f51eff8a6f17bc


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities malicious URLs installed browsers check Tofsee Windows Exploit Browser ComputerName DNS Software crashed 		3 3 15 14.6 M

48955 2020-07-17 14:22 http://jdtrusttrading.org/4656...  

02bb1837b843f982b3a5c49aad515e10


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 2 16.2 M 33

48956 2020-07-17 14:22 vbc.exe  

560888126b865a4bd341bb5c1fffbdc4


VirusTotal Malware suspicious privilege Code Injection buffers extracted unpack itself sandbox evasion crashed 		6.4 M 40

48957 2020-07-17 14:21 http://39unitedfrkesokoriorimi...  

560888126b865a4bd341bb5c1fffbdc4


VirusTotal Malware suspicious privilege Code Injection buffers extracted Creates executable files exploit crash unpack itself Windows utilities sandbox evasion Windows Exploit DNS crashed Downloader 		1 1 3 8.2 M

48958 2020-07-17 14:20 http://192.236.154.89/2.exe  

838111ab2eddfdd565bf1bd43c7af7c3


Malware download VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder sandbox evasion Windows Exploit Trojan DNS crashed 		1 1 4 7.0 M 43

48959 2020-07-17 12:35 winamp58_3660_beta_full_en-us....  

3017f921a6c42a267842cc8bae9384c1


Malware MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk Firewall state off VM Disk Size Check installed browsers check Ransomware Interception Windows Browser ComputerName DNS 		1 2 1 9.8

48960 2020-07-17 11:50 http://19workfineanotherrainbo...  


VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Tofsee Windows DNS 		1 1 2 3.8 M

keyword