popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49141 2021-01-29 10:08 osamax.scr  

233052898800d961e4fc3ef2a339f555


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		1 1 1 12.6 M 12 ZeroCERT

49142 2021-01-29 10:07 DSC_Canon_110202_23.01.2021.zi...  

4568bbfb8b5a5161c8b1045051933788


unpack itself 		1.2 ZeroCERT

49143 2021-01-29 09:59 IMG-0607.pdf.exe  

263f0b35e5768e624a84ac122bbf6a8c


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VMware IP Check VM Disk Size Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 7 4 16.2 M 24 ZeroCERT

49144 2021-01-29 09:59 gwfa.exe  

a8417cfd71637c7371986737cff269cf


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS 		1 3 12.6 M 58 ZeroCERT

49145 2021-01-29 09:39 1599400056-01282021.xls  

b4f063612cbe944f5f63e3e132793941


Malware download Dridex TrickBot VirusTotal Malware suspicious privilege Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Kovter Windows ComputerName DNS Downloader 		7 6 8.0 M 6 ZeroCERT

49146 2021-01-29 09:39 bvsd.exe  

3adae286b1688adb95794b29d21f6ca0


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS 		2 4 11.6 M 20 ZeroCERT

49147 2021-01-28 19:26 http://transplugin.io  

242c23ea412530c7d94b77a7a978c176


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 3 4.8 guest

49148 2021-01-28 13:58 nfeX-99.msi  

d388da2bf1c9ef59eabce635a6909348


Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates shortcut unpack itself malicious URLs AntiVM_Disk suspicious TLD VM Disk Size Check ComputerName DNS DDNS 		1 4 2 5.8 29 ZeroCERT

49149 2021-01-28 13:55 5319402.jpg.exe  

331bdaa5cb5dab743006128aff340979

 0.2 ZeroCERT

49150 2021-01-28 13:24 5319402.jpg.exe  

331bdaa5cb5dab743006128aff340979

 0.2 ZeroCERT

49151 2021-01-28 13:23 5555.jpg.exe  

de6108a215b25132877b39590951dce3

 0.2 ZeroCERT

49152 2021-01-28 12:20 6gdwwv.exe  

77be0dd6570301acac3634801676b5d7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName DNS Software 		1 4 1 10.0 M 53 ZeroCERT

49153 2021-01-28 12:20 xkp369t.zip.exe  

ba58b7e985b1b06985ddd90a8a1c622b


VirusTotal Malware PDB Check memory unpack itself malicious URLs WriteConsoleW Windows Cryptographic key 		3.0 M 15 ZeroCERT

49154 2021-01-28 10:38 WAH.exe  

1514dad5fc756723d4c00e0817605ae9


VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName Cryptographic key crashed 		2 14.4 M 24 ZeroCERT

49155 2021-01-28 10:37 vbc.exe  

fcbfe0655ddb6609b6145f5798e7c9bf


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS crashed 		10.6 M 15 ZeroCERT

keyword