popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
48991 2021-02-05 10:42 document.doc  

4e87ed4b9b082944c95ae960a71acee6


VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		1 1 6 5.2 M 28 ZeroCERT

48992 2021-02-05 10:39 13jcAOKhFZ4p10l.exe  

970239926ca7461a81faa9d3c0903f4e


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		11.8 M 31 ZeroCERT

48993 2021-02-05 10:38 6lhjgfdghj.exe  

77be0dd6570301acac3634801676b5d7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName Software 		1 4 1 8.8 M 59 ZeroCERT

48994 2021-02-05 09:53 vbc.exe  

aeb1715abadaf8a4a0ec5576eaf6197c


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion installed browsers check Windows Browser Email ComputerName Software 		1 9.0 M 24 ZeroCERT

48995 2021-02-05 09:45 Terminator.msi  

99ad633f8692cf7e8ea375f7e611ca28


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 4.0 M 28 ZeroCERT

48996 2021-02-05 09:44 rx.exe  

7f53292ca3fd26580244167e922db361


VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs Windows ComputerName DNS Cryptographic key crashed 		1 8.2 M 50 ZeroCERT

48997 2021-02-05 09:41 r1.exe  

49c178fe7ccf97e9a20af386f51eb7e6


VirusTotal Malware Buffer PE AutoRuns MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs Windows DNS Cryptographic key keylogger 		1 11.6 M 29 ZeroCERT

48998 2021-02-05 09:41 kali.txt.exe  

bc64988e6d3ba51bcfec450e031c62c8


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 1 8.0 M 27 ZeroCERT

48999 2021-02-04 19:32 order2020.xlsx.jar  

5187ae708fc760b89012cdf9dfff6f20


VirusTotal Malware Check memory heapspray unpack itself Java 		2.8 30 guest

49000 2021-02-04 19:31 ed1d6e16dd9ace1a1ec7fd.exe  

a2f509b83302c585a4853e15192b7ff0


VirusTotal Malware Check memory RWX flags setting unpack itself anti-virtualization 		2.8 44 guest

49001 2021-02-04 18:31 doc09876578.exe  

beb762350c33540220d014b884e748f3


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion DNS 		22 25 1 6.4 M 22 ZeroCERT

49002 2021-02-04 18:28 bigmanx.scr  

f33ad874f978a5882b114395cc182978


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 1 1 16.2 M 22 ZeroCERT

49003 2021-02-04 18:26 bigmanx.exe  

c70760b818f8401d61a211943a54a4db


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		11.6 17 ZeroCERT

49004 2021-02-04 18:25 a.bat  

3779048d0752c8476e93344651bed1d8


VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		5.4 3 ZeroCERT

49005 2021-02-04 18:19 WAH.exe  

b295230847525e67d4c7d23df1be0cae


Malware download Nanocore Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		2 2 14.0 M ZeroCERT

keyword