popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49111 2021-02-01 22:11 hkcmd.exe  

b8fbbf48619bf863aba9e5eb8fb3f81e


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs 		11 13 6 9.0 M 17 guest

49112 2021-02-01 16:46 document.doc  

ae9cd0d00d776cbef69043a7d2f025c3


Dridex VirusTotal Malware exploit crash unpack itself malicious URLs Tofsee Exploit crashed 		2 3 3.6 15 guest

49113 2021-02-01 12:35 vbc.exe  

7aecb24d8babdcdf05a5848e7029e94f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows Cryptographic key 		5 9 9.0 M 11 ZeroCERT

49114 2021-02-01 12:28 pppp.exe  

b88c6ae98565520b5abf0dbc67522f1d


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		1 5 1 14.8 M 48 ZeroCERT

49115 2021-02-01 12:28 sppp.exe  

b12bb3159a945df7c5944b6f4192516d


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key 		1 2 1 10.6 M 39 ZeroCERT

49116 2021-02-01 12:26 OBBBOP.exe  

06f4d22f42e1d2406d5dd25c69aa92ac


Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Tofsee Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 3 1 17.4 M 41 ZeroCERT

49117 2021-02-01 12:22 obbbb.exe  

52f0b3acdd40bc050d4c0cdac026cf73


VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		4 5 1 15.0 M 27 ZeroCERT

49118 2021-02-01 12:21 sil.exe  

8ecb4e5a7e2da81cfc68069c61d873a0


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		10.6 M 40 ZeroCERT

49119 2021-02-01 11:28 cpu64.exe  

a431c41c39712dfbc0c8a50fe6abc95f


unpack itself malicious URLs DNS 		2.6 ZeroCERT

49120 2021-02-01 11:28 wifi.exe  

022abc021cc91efe3e1bc65b158654e4


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName 		10.4 M 52 ZeroCERT

49121 2021-02-01 11:17 svch.exe  

d7c6ddd2feb3c305103f5c3cbb81ba01


VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		7 22 4 4.0 M 56 guest

49122 2021-02-01 11:17 vbc.exe  

6eac032479caee22d70c96d763cc5e10


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 14.4 M 46 guest

49123 2021-02-01 11:11 SQLSerase.exe  

af9652990abce48e2e848e097c7ee4ab


AutoRuns suspicious privilege Creates executable files unpack itself malicious URLs Windows DNS 		2 1 4.6 M guest

49124 2021-02-01 11:03 ReportServser.exe  

a2eea769cf4aa2d2f21b9b2292332a43


Buffer PE AutoRuns suspicious privilege Code Injection Check memory buffers extracted Creates executable files unpack itself Windows utilities AppData folder sandbox evasion WriteConsoleW Windows RCE DNS 		2 1 10.8 M guest

49125 2021-01-31 16:38 regasm.exe  

d7c6ddd2feb3c305103f5c3cbb81ba01


VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		13 23 6 4.0 M 56 guest

keyword