popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49186 2021-01-22 14:27 inst.exe  

6226d18273fc74d923183ea7510e595a


VirusTotal Malware AutoRuns PDB suspicious privilege ICMP traffic unpack itself malicious URLs Windows Advertising crashed 		2 8.0 M 34 ZeroCERT

49187 2021-01-22 14:09 haitianx.scr  

c2a516ecaa7cd7627eee19decabbedb6


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed 		4 1 4 13.8 M 15 ZeroCERT

49188 2021-01-22 14:09 gfers.exe  

f781bbd506e29a57c76c1e647bef90ba


VirusTotal Malware unpack itself RCE DNS 		2.8 M 25 ZeroCERT

49189 2021-01-22 13:50 davincii.scr  

8806d043a732233b3f67303b04a9d6ae


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed 		1 15.0 M 17 ZeroCERT

49190 2021-01-22 13:49 fdwzkmx.rar.exe  

4746fbed409f87ec6ddb6653cb4e201c


Malware download Dridex TrickBot VirusTotal Malware PDB MachineGuid Malicious Traffic Checks debugger unpack itself Collect installed applications installed browsers check Kovter Browser ComputerName DNS crashed 		1 2 6.8 M 36 ZeroCERT

49191 2021-01-22 10:25 d2.exe  

5092bff4eca423c90563e487762966b3


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		6 12 2 10.6 M 23 ZeroCERT

49192 2021-01-22 10:24 d1.exe  

7cc23aa86ee79dc1e11a395e85096ec3


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		7 12 2 11.0 M 21 ZeroCERT

49193 2021-01-22 10:18 CL4G.dll  

3e1249e4d0b0b61d493da93139b9f3a4


VirusTotal Malware 		1.4 M 50 ZeroCERT

49194 2021-01-22 10:18 5555555555_2.jpg.exe  

42574d38cc2760ec1e2ed9beb234567b

 0.2 M ZeroCERT

49195 2021-01-22 10:13 zbf8jiX.exe  

3b6e27d8d7051194ba8dd6fd3a299f95


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW IP Check Windows ComputerName 		1 2 1 13.0 M 45 ZeroCERT

49196 2021-01-22 10:09 5555555555.jpg.exe  

c1a0cf6c95370e2bb4e3d7b8353d883e


VirusTotal Malware 		1.4 M 41 ZeroCERT

49197 2021-01-22 09:31 winlog4.exe  

ac98cc8a1ff04aa8ae259ab9436a1fa7


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 10.2 M 34 ZeroCERT

49198 2021-01-22 09:31 winlog3.exe  

f9d11b84c36b4ef4af4f24aae95f9fb5


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 9.2 M 32 ZeroCERT

49199 2021-01-22 00:30 winlog2.exe  

f69047c67c621e68c5b21d46fa60a629


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself Windows utilities malicious URLs Windows DNS 		12 17 13.0 M 23 ZeroCERT

49200 2021-01-22 00:29 winlog.exe  

3a9e68325d16c69df66db1b81f666601


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs DNS 		8 13 2 9.4 M 13 ZeroCERT

keyword