popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49246 2021-01-21 09:55 FastVD.exe  

8f03ea5837f34733778418eb68134c34


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs AntiVM_Disk VMware IP Check VM Disk Size Check Tofsee Windows DNS 		6 7 8 8.6 M 38 ZeroCERT

49247 2021-01-21 09:55 figg.exe  

dfd545dbc01cac5d86f94dd0a3c8d675


Malware Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox Check virtual network interfaces malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software 		1 9.2 M ZeroCERT

49248 2021-01-21 09:33 DR1.exe  

67698483a208b58241acfcdbe9682f90


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox Check virtual network interfaces malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software crashed 		1 10.4 M 35 ZeroCERT

49249 2021-01-21 09:33 effp.exe  

1983ead6d04607d63ca056ec796fb87f


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox Check virtual network interfaces malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software crashed 		1 10.4 M 39 ZeroCERT

49250 2021-01-21 09:24 Crypto.exe  

1e7b2831c2f3119aa5f38a3f0202bfc0


VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs AntiVM_Disk sandbox evasion VMware IP Check VM Disk Size Check installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key 		21 15 5 14.2 M 41 ZeroCERT

49251 2021-01-21 09:21 cj.exe  

f8bb59b31d3c499175097b82261b76c7


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName DNS 		1 13.4 M 39 ZeroCERT

49252 2021-01-21 08:26 http://solicwebaps.azurewebsit...  

3e1249e4d0b0b61d493da93139b9f3a4


Dridex VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		2 5 5.0 M 22 ZeroCERT

49253 2021-01-20 18:32 AQW.exe  

022d116c9e8cc50f7b3d837b69eef49a


Browser Info Stealer VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Windows Browser ComputerName DNS Cryptographic key crashed keylogger 		2 16.0 M 21 ZeroCERT

49254 2021-01-20 18:32 CIC.exe  

823f0fa14ac82cd2e7629ba0b49a7a04


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed keylogger 		2 14.8 M 19 ZeroCERT

49255 2021-01-20 18:11 Alex.exe  

9a330e4e8d5854f48fc2cc07cc397108


VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder VMware IP Check Tofsee DNS crashed 		4 4 4 5.6 M 42 ZeroCERT

49256 2021-01-20 18:11 admin.exe  

d64ae064a4fc5d008723a2d092d232e5


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Checks Bios Detects VirtualBox Check virtual network interfaces malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key Software 		4 1 9.8 13 ZeroCERT

49257 2021-01-20 17:00 16.exe  

f14aa539774febdbb336e256eba3738c


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		14.2 15 ZeroCERT

49258 2021-01-20 16:58 67.exe  

33781d32bd85d61f542cb3167631fb39


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName crashed 		13.6 M 25 ZeroCERT

49259 2021-01-20 16:08 5555555555.jpg  

1c50880c62efbe568b81db024fedd43f

 0.2 guest

49260 2021-01-20 16:01 IMG_06176.pdf  

af5e99b838ae10dbc1e7cedc58413b06


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 1 15.0 M 25 guest

keyword