popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49006 2021-02-04 18:19 svchost.exe  

8fa44c395d73279bc27b6a32ff5970d6


VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW IP Check Tofsee Windows ComputerName DNS Cryptographic key crashed 		4 3 3 12.0 M 55 ZeroCERT

49007 2021-02-04 18:12 shample.exe  

e8fcf392ddcf20137e01e83a6275bc5a


AutoRuns PDB suspicious TLD Windows 		1 1.6 ZeroCERT

49008 2021-02-04 18:07 shared.xls  

f623477eec15e20ba379032335f46743


VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		2 6 1 10.2 M 7 ZeroCERT

49009 2021-02-04 17:51 rx.exe  

7f53292ca3fd26580244167e922db361


VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs Windows ComputerName DNS Cryptographic key crashed 		1 1 8.2 M 48 ZeroCERT

49010 2021-02-04 17:50 ProductDiagnosticHelper.msi  

038a0b84d1979d20c7a0788f3ca5a4ae


Malware download Dridex NetWireRC VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check Tofsee BitRAT ComputerName DNS 		3 4 4.2 M 35 ZeroCERT

49011 2021-02-04 17:48 lv.exe  

5d2f84a7e74e6e5ff1db4c4038d0f5e4


VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities Checks Bios Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization IP Check VM Disk Size Check Tofsee Windows ComputerName crashed 		2 4 2 13.2 M 48 ZeroCERT

49012 2021-02-04 17:45 Loader.exe  

d4c9ea37c5282f1844e4a440641434b2


Malware download VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Interception Windows ComputerName Trojan DNS Cryptographic key crashed 		20 5 1 2 22.0 M 43 ZeroCERT

49013 2021-02-04 17:42 file.exe  

b8b7b4f5bc704558dcf41a39c2f9fd6d


VirusTotal Malware unpack itself RCE 		2.4 M 36 ZeroCERT

49014 2021-02-04 17:40 jng.exe  

c5bc25e433957078776a6cfcee5961c2


VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger unpack itself Windows utilities suspicious process malicious URLs Windows DNS Cryptographic key 		7.6 M 52 ZeroCERT

49015 2021-02-04 16:17 EIC.exe  

49318d20791b87d4bb0abca27ee83a67


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself suspicious process WriteConsoleW Windows Cryptographic key crashed 		6.6 M 36 ZeroCERT

49016 2021-02-04 16:04 ecomx.exe  

01b636a8ae4dd00d31df4fecc6b1190c


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS 		1 1 1 4.2 M 47 ZeroCERT

49017 2021-02-04 16:00 cred.dll  

6a860fb58935625b193316ead3384a1c


FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email DNS Software 		1 1 1 6.2 M 40 ZeroCERT

49018 2021-02-04 16:00 DsQwouT0.exe  

943dff6e7979ded5b2d94f4e0503704a


VirusTotal Malware RCE 		1.4 19 ZeroCERT

49019 2021-02-04 11:04 aa.exe  

1ff59d25828ac6ee321e571439410b12


VirusTotal Cryptocurrency Miner Malware Cryptocurrency SMB Traffic Potential Scan AutoRuns Check memory Creates executable files ICMP traffic unpack itself Windows utilities Auto service Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Windows Browser ComputerName RCE DNS 		1 5 5 15.4 56 ZeroCERT

49020 2021-02-04 11:03 906249IMG_055708.pdf.exe  

3a0f89e50b88ed60053533cca7003388


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 6 4 16.0 M 18 ZeroCERT

keyword