Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
49081	2020-07-09 12:46	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Code Injection Creates executable files unpack itself Windows utilities Windows	1 Keyword trend analysis	2			2.6	M

49082	2020-07-09 11:59	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Code Injection Creates executable files unpack itself Windows utilities Windows	1 Keyword trend analysis	2			2.6	M

49083	2020-07-09 11:55	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Code Injection Creates executable files unpack itself Windows utilities Windows	1 Keyword trend analysis	4			2.6	M

49084	2020-07-09 10:17	Opencapture v7.0 Setup.exe c534ef899cd8782854db5409ac807e97 Malware Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName Trojan Banking crashed	4 Keyword trend analysis	4			8.6	M

49085	2020-07-09 10:15	Opencapture v7.0 Setup.exe c534ef899cd8782854db5409ac807e97 Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName Trojan Banking crashed keylogger	10 Keyword trend analysis Info http://opencapture.net/update/homepage.php?mode=1 http://ww12.opencapture.net/ls.php http://opencapture.net/update/ocupdate.php?ver=MTkyLjE2OC41Ni4xMDFbMDgtMDAtMjctQ0MtRkEtNTld http://ww12.opencapture.net/favicon.ico http://opencapture.net/update/homepage.php?mode=1 http://ww12.opencapture.net/track.php?click=a652a129c5571e206b09827c3e58f34a4a24eb8a&domain=opencapture.net&uid=MTU5NDI1NzIyNS41Njg5OmI5ZmYzOTI0OWE5ZmJhYmM5ZTVmZDBkM2IzOGQxZTFlYzcwMThlN2ZjMjZhYWVjNGIyNTc5MjQ1ODQ4NDgyNmQ6NWYwNjZmNDk4YWU2Mw%3D%3D&ts=fHx8ZDQxZDh8fHx8fHx8NWYwNjZmNDk4OTllMXx8fDE1OTQyNTcyMjUuOTkxMXxhMDVjMGI4OGZlMjU3NTk2NDI1ZmJmNzViOWEwNWE3YzkyYWZhMmIzfHx8fHwxfHx8MHx8fHwwfHx8fHwwfDB8fHx8fHx8fHx8MHwxfHwwfDB8MXwwfDB8VzEwPXx8MXxXMTA9&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off http://opencapture.net/ http://ww12.opencapture.net/track.php?domain=opencapture.net&toggle=browserjs&uid=MTU5NDI1NzIyNS41Njg5OmI5ZmYzOTI0OWE5ZmJhYmM5ZTVmZDBkM2IzOGQxZTFlYzcwMThlN2ZjMjZhYWVjNGIyNTc5MjQ1ODQ4NDgyNmQ6NWYwNjZmNDk4YWU2Mw%3D%3D http://parkingcrew.net/assets/scripts/js3.js http://ww12.opencapture.net/ https://clients2.google.com/service/check2?crx3=true&appid=%7B430FD4D0-B729-4F61-AA34-91526481799D%7D&appversion=1.3.35.452&applang=&machine=1&version=1.3.35.452&userid=&osversion=6.1&servicepack=Service%20Pack%201	12 Info susa.shridevi-yng.com(54.174.38.189) opencapture.net(72.52.179.174) clients2.google.com(172.217.24.142) katie.ttnrd.com(3.90.125.85) amanda.ttnrd.com(3.90.125.85) parkingcrew.net(185.53.179.29) ww12.opencapture.net(185.53.179 172.217.24.142 185.53.179.29 52.202.231.67 54.152.245.247 72.52.179.174			9.0	M

49086	2020-07-09 10:06	QUOTATION_49027352-pdf.exe 2714c2eac0417bec3b7186c77a5ad059 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key crashed		1			12.6		41

49087	2020-07-09 10:02	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName DNS	1 Keyword trend analysis	3			8.8	M

49088	2020-07-09 09:54	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	2 Keyword trend analysis	5			10.6	M

49089	2020-07-09 09:48	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities AntiVM_Disk VM Disk Size Check Windows ComputerName DNS	1 Keyword trend analysis	2			6.4	M

49090	2020-07-09 09:47	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	2 Keyword trend analysis	5			10.8	M	24

49091	2020-07-09 08:38	Bill_jule25_proposal2.xls fd53d69f88f0b9981cda1c0f1a52b75a VirusTotal Malware unpack itself malicious URLs					2.2	M	38

49092	2020-07-09 08:37	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	1 Keyword trend analysis	4			10.8	M	24

49093	2020-07-09 07:51	http://doorbhai.com/wp-keys.ph... 7d23bb67055769142aa57e851fe8c83d VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Windows	1 Keyword trend analysis	2			3.0	M

49094	2020-07-08 18:19	http://veyron.ir/gregx/frankx.... 87712606fb9aaef0299a5ec915de4544 VirusTotal Malware Code Injection buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs sandbox evasion Windows Exploit crashed	1 Keyword trend analysis	2			8.2	M	49

49095	2020-07-08 17:47	https://app.gomtv.com/gom/NEW_... cdf0ee07031e51f2fb8648e1abe9f1f4 VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed	1 Keyword trend analysis	2			4.0	M	3