popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49291 2021-01-19 19:52 a.bat  

b069d57216e8231d7afba2cf8d6cffca


VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key 		6.0 2 ZeroCERT

49292 2021-01-19 19:51 xp.exe  

9d90a61620ab938eff9b8cf385330d18


VirusTotal Malware AutoRuns Check memory Windows DNS 		1 3.2 M 51 ZeroCERT

49293 2021-01-19 19:42 winlog2.exe  

d4982ab3c53ad21f2b1b96f7ae8042d4


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		2 6 10.0 M 20 ZeroCERT

49294 2021-01-19 19:42 winlog3.exe  

04d511a27304f93e708f91308d483358


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		2 4 8.2 M 19 ZeroCERT

49295 2021-01-19 18:04 win32.exe  

1c68b56f273eab047eccce3cbad492a5


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		16 18 9.8 M 25 ZeroCERT

49296 2021-01-19 18:03 winlog.exe  

b66575e9b08b09e31b3bc4089965474b


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory unpack itself suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 9.6 M 49 ZeroCERT

49297 2021-01-19 17:58 svchost.exe  

3096a3c81ff6c435ded33765f5f10be1


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself suspicious process malicious URLs Windows ComputerName DNS Cryptographic key 		8.4 M 14 ZeroCERT

49298 2021-01-19 17:57 vbc.exe  

c6091ddf2745b7edcfa535d727ea7b7a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 12.6 M 36 ZeroCERT

49299 2021-01-19 17:33 s.exe  

dbf1dde293475eccf03f89c27399e631


VirusTotal Malware AutoRuns Check memory buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities suspicious process AppData folder malicious URLs sandbox evasion Tofsee Windows Gmail Advertising Google ComputerName RCE DNS DDNS crashed keylogger Downloader 		14 24 8 16.6 M 53 ZeroCERT

49300 2021-01-19 11:32 regasm2.exe  

7741e4266e8d98231cb6b0b89b1f4e9a


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 14.0 M 15 ZeroCERT

49301 2021-01-19 11:31 regasm.exe  

786180a5141bf4ea48e26910d2bf9061


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs 		5.8 M 23 ZeroCERT

49302 2021-01-19 11:28 KUT.exe  

40c5609d0196211eae06a33b3bae5ec8


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process malicious URLs WriteConsoleW Windows Cryptographic key keylogger 		2 15.0 M 43 ZeroCERT

49303 2021-01-19 11:28 IMG_26017.pdf.exe  

3638367090aa7b5f444c76c0d1af9582


Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed 		2 4 4 16.2 M 27 ZeroCERT

49304 2021-01-19 11:17 IMG_6007.pdf.exe  

27970a1a59a9e4f39aed843e55e31ae0


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.0 M 14 ZeroCERT

49305 2021-01-19 11:11 win32.exe  

1c68b56f273eab047eccce3cbad492a5


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		14 17 1 9.8 M 25 ZeroCERT

keyword