popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49036 2021-02-03 18:22 aguerox.scr  

c96bca895f08287e145cf97fa5b4158f


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		2 3 7 1 15.8 M 18 ZeroCERT

49037 2021-02-03 18:12 winlog4.exe  

524ac66f24321c6da65f2b098978bff7


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		12 14 9.6 M 16 ZeroCERT

49038 2021-02-03 18:11 winlog3.exe  

5ec4108db8c98d030cea2bb1ea95b725


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 5 10.0 27 ZeroCERT

49039 2021-02-03 17:51 winlog2.exe  

84756d09ad2ebedc58b7a9c1f8eef37a


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		8 15 9.2 M 17 ZeroCERT

49040 2021-02-03 17:50 winlog.exe  

d64f47ad1647d93473130d1e301adbb0


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		10 12 8.6 M 16 ZeroCERT

49041 2021-02-03 17:33 vbc.exe  

766ba75de87fda229a25dbccd8a6218f


VirusTotal Malware RWX flags setting unpack itself malicious URLs Tofsee DNS crashed 		2 1 4.4 M 18 ZeroCERT

49042 2021-02-03 14:49 scr.dll  

2928f54a3af6cbea7c0d669b246c8bce


VirusTotal Malware Malicious Traffic Checks debugger buffers extracted unpack itself malicious URLs DNS 		1 1 4.8 M 35 ZeroCERT

49043 2021-02-03 14:47 svch.exe  

2d2df98c3ca178862612a0527503ca5b


VirusTotal Malware RWX flags setting unpack itself malicious URLs Tofsee DNS crashed 		2 1 4.8 M 37 ZeroCERT

49044 2021-02-03 14:39 proforma.exe  

05f8d37087eb2818436f604cea3e5e87


VirusTotal Malware AutoRuns PDB suspicious privilege Check memory Checks debugger WMI unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Windows ComputerName Cryptographic key crashed keylogger 		1 4 1 10.8 M 47 ZeroCERT

49045 2021-02-03 14:39 Protected Client.vbs  

9f969c41db50bac5bf029f83c5456a09


VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows Java ComputerName DNS Cryptographic key DDNS keylogger 		6 2 16.2 M 8 ZeroCERT

49046 2021-02-03 14:35 odinaka.scr  

b509dff7edd46ff799f8f854d6de3617


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 1 1 14.2 M 39 ZeroCERT

49047 2021-02-03 14:35 ppei.exe  

ac4cd44715d6bcee3624efeaf5b7b107


VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS 		1 10.2 M 47 ZeroCERT

49048 2021-02-03 14:23 licenser.txt.exe  

edacbd011f5d6d4bd0646ebdff7499ca


VirusTotal Malware Buffer PE Malicious Traffic Check memory buffers extracted Creates executable files unpack itself AppData folder malicious URLs Tofsee Windows DNS crashed 		4 2 4 7.0 M 34 ZeroCERT

49049 2021-02-03 14:22 mii.exe  

8315199b3ee08e32cf5d72c94c1827ee


VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS 		1 10.2 M 47 ZeroCERT

49050 2021-02-03 14:13 invoice_45212.doc  

f05f34a933c910b787d64a63d8514744


Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed 		1 5 4.4 M ZeroCERT

keyword