popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49171 2021-01-27 18:43 http://mkontakt.az/111.exe  

7fe2322db3d58f5b993fadbaaff908be


Dridex VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 4 5.2 26 ZeroCERT

49172 2021-01-27 18:23 x2.exe  

39de62da4dfeff9120a26dde09bdc502


VirusTotal Malware Malicious Traffic unpack itself Tofsee Windows DNS 		3 3 3 3.8 M 20 ZeroCERT

49173 2021-01-27 18:22 x.exe  

0b184fd1c1c4004732543ec8fcfb2dec


VirusTotal Malware unpack itself 		1.8 M 19 ZeroCERT

49174 2021-01-27 18:11 winlog.exe  

3ed71f97489274760b6cf02192304259


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		16 16 10.2 M 26 ZeroCERT

49175 2021-01-27 18:10 regasm.exe  

1c542066dfe0b5bf71f31f6fb040bea8


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.4 M 15 ZeroCERT

49176 2021-01-27 18:03 omamsa.exe  

8e4e60df0ee32e049f04663cc631d739


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		1 1 1 13.6 M 8 ZeroCERT

49177 2021-01-27 18:03 IMG-50230.pdf.exe  

beb09e991a41577e79dfabc58178a44f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key 		3 7 2 10.2 M 17 ZeroCERT

49178 2021-01-27 17:58 530340.cls.exe  

c740bdab4e7f09140d91c235867b5b4f


VirusTotal Malware unpack itself RCE 		2.6 M 20 ZeroCERT

49179 2021-01-27 17:56 IMG-50230.pdf.exe  

beb09e991a41577e79dfabc58178a44f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows Cryptographic key 		1 2 1 10.2 17 ZeroCERT

49180 2021-01-27 17:34 winlog6.exe  

cf1df9447bb09096f96cc7ff65852e73


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 11.2 M 38 ZeroCERT

49181 2021-01-27 17:21 winlog4.exe  

8fdff316f12069a8982756b946d065f4


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Tofsee Browser Email ComputerName DNS Software 		1 1 1 12.8 M 25 ZeroCERT

49182 2021-01-27 17:21 winlog5.exe  

880b987607e4a382fc7e8364a36872ad


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.6 M 28 ZeroCERT

49183 2021-01-27 17:16 winlog2.exe  

5c0de7259a084a9f9acab766469540ee


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 11.6 M 37 ZeroCERT

49184 2021-01-27 17:16 winlog3.exe  

9021643741f28e6a7032d8fe3fcd20f1


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 7 10.4 M 25 ZeroCERT

49185 2021-01-27 17:09 winlog.exe  

73e25f09d4c7e66c2f126f49e47154aa


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS crashed 		10.2 M 23 ZeroCERT

keyword