popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49336 2021-01-15 10:59 invoice.exe  

07d297371e6af555aa5ed31d423de4bc


VirusTotal Malware unpack itself 		1.8 M 28 ZeroCERT

49337 2021-01-15 10:58 5SVA7Ab.dll  

7fea00378451a67e8ad1a95d337ca6a7


VirusTotal Malware unpack itself malicious URLs 		2.2 M 24 ZeroCERT

49338 2021-01-14 23:06 yx.dll  

f484e05278de137cef239080249c859e


VirusTotal Malware unpack itself 		1.8 M 26 ZeroCERT

49339 2021-01-14 23:00 yhdl.exe  

d6affe0bfbe329109f5dc3e785fce0b4


VirusTotal Malware PDB Code Injection Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself malicious URLs AntiVM_Disk Ransom Message VM Disk Size Check installed browsers check Interception Browser ComputerName RCE DNS 		32 15 10.6 M 29 ZeroCERT

49340 2021-01-14 22:55 winlog.exe  

cd925558146dc80ccf028ce0e9a5c542


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		2 5 10.8 M 23 ZeroCERT

49341 2021-01-14 22:53 xAL2ZKjESrfO.dll  

e90ffc58b3d9d3237121a3af6d05b927


VirusTotal Malware unpack itself 		1.8 26 ZeroCERT

49342 2021-01-14 21:53 vbc.exe  

348c5527c97fb01007036353fc566fe3


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		12.2 M 28 ZeroCERT

49343 2021-01-14 21:53 vbc2.exe  

7c0158f3cf2b6d843226e3a1a86cc11f


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.6 M 22 ZeroCERT

49344 2021-01-14 21:38 TRSU3GWU9YT1QG.doc  

891461e859d74c54f7c50edcf2377d05


Vulnerability VirusTotal Malware Report Malicious Traffic unpack itself malicious URLs Tofsee Windows DNS 		2 11 7 5.4 M 33 ZeroCERT

49345 2021-01-14 21:38 tttt.jpg.exe  

c82ca6c32016c3867edf5263e33687f8


Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed 		2 4 4 13.4 M 32 ZeroCERT

49346 2021-01-14 21:30 tfsoft.exe  

1d6edfa073e4a8f072df28cfd5321bba


VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic buffers extracted ICMP traffic unpack itself Windows utilities Detects VMWare suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VMware VM Disk Size Check Tofsee Windows crashed 		6 12 1 15.4 M 51 ZeroCERT

49347 2021-01-14 21:30 svchost.exe  

deed11e2b4b23dbe0c9ef99b5390bd6f


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization ComputerName DNS Software 		2 4 14.4 M 45 ZeroCERT

49348 2021-01-14 18:27 regasm.exe  

bdcead3de71d101dc2d02676be1c9df5


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS 		16 16 1 8.8 M 21 ZeroCERT

49349 2021-01-14 18:27 SlyOzj2S7kfU8q.php.exe  

9ea3fb3f680abbd409a76bb590db83f0


RCE 		0.8 ZeroCERT

49350 2021-01-14 18:25 RE-0107.jpg.exe  

cf0e69a2b8739ddf78c0591882419c94


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.8 M 20 ZeroCERT

keyword