popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49081 2021-02-02 10:28 alofus.exe  

2472f13ce1ea0accbd2e180502feae7d


VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName DNS 		1 9.2 M 26 guest

49082 2021-02-02 10:13 ajoche.exe  

39d2f3d612d00a9d4845be3fa70a1ee3


Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 3 17.2 M 27 ZeroCERT

49083 2021-02-02 10:12 131.exe  

800c49ab811170f1e57f5e40c3eed53c


Malware download Azorult Dridex TrickBot VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Kovter Browser ComputerName DNS 		1 1 5 1 9.6 M 38 ZeroCERT

49084 2021-02-02 10:08 5.scr  

f0d8f5b7a0e01207efc16af30462944c


Malware download Amadey VirusTotal Malware AutoRuns MachineGuid Malicious Traffic Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS 		6 3 8.8 M 61 ZeroCERT

49085 2021-02-02 10:07 113e.exe  

7fe2322db3d58f5b993fadbaaff908be


Malware download Azorult Dridex TrickBot VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Kovter Browser ComputerName DNS 		1 1 5 1 11.2 M 51 ZeroCERT

49086 2021-02-02 03:42 042b7d9208258a1a64b9a1ab0079e1...  

9c47eef4c66e4587ecddb55cfc3ef1e6


Dridex VirusTotal Malware Creates executable files unpack itself malicious URLs Tofsee 		2 3 4.8 28 guest

49087 2021-02-01 23:52 42af40f99512443cbee03d090658da...  

06af27c0f47837fb54490a8fe8332e04


VirusTotal Malware AutoRuns Check memory Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs sandbox evasion WriteConsoleW Windows DNS 		1 10.4 M 51 ZeroCERT

49088 2021-02-01 23:52 c697ad8c21ce7aca0a98e6bbd1b81d...  

c697ad8c21ce7aca0a98e6bbd1b81dff


VirusTotal Malware AutoRuns Checks debugger Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName RCE 		4.6 M 17 ZeroCERT

49089 2021-02-01 23:45 1b31bced0a564bed9f60264f061dcd...  

7fb109c410846c73a5d67a5b9b665491


Check memory Checks debugger Creates executable files unpack itself malicious URLs sandbox evasion RCE DNS 		5.6 M ZeroCERT

49090 2021-02-01 23:45 6c99c19d6da741af943a35016bb05b...  

11b4d2182aeaeb0462319bec4e5f09c2


VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself Windows utilities malicious URLs Windows Advertising RCE 		5.2 M 35 ZeroCERT

49091 2021-02-01 23:41 winlog4.exe  

cdcc17e1b5807fe352b847ba8efc3c1a


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.6 M 21 ZeroCERT

49092 2021-02-01 23:39 winlog4.exe  

cdcc17e1b5807fe352b847ba8efc3c1a


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		8 12 11.2 M 21 ZeroCERT

49093 2021-02-01 23:36 yarox.scr  

13ae0f94a8dbf3b2e3c18d63807a081b


VirusTotal Malware 		0.4 M 5 ZeroCERT

49094 2021-02-01 23:31 winlog2.exe  

e0a35464c8997bf189d9de32563fa11b


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs 		10 13 9.2 M 7 ZeroCERT

49095 2021-02-01 23:31 winlog3.exe  

839479471405527c2783b6ad79c1bc40


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 6 9.0 M 21 ZeroCERT

keyword