popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49801 2020-12-17 17:57 http://mute-saga-0240.lovesick...  

7aa5769c35ee7fc6bf69d344890a95f1


Dridex Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 4 4.6 12 r0d

49802 2020-12-17 17:42 631ec884e194a04ac89ae7db34ee2c...  

631ec884e194a04ac89ae7db34ee2cdc


Vulnerability VirusTotal Malware wscript.exe payload download unpack itself malicious URLs 		2 6.8 M 20 r0d

49803 2020-12-17 17:12 regasm.exe  

8ffafa832e6e9a941c2b87a7c75d6d27


VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		1 3 1 14.0 M 55 ZeroCERT

49804 2020-12-17 16:19 vbn.exe  

74e570ba5f6106f6e93121660da4f462


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		1 2 13.2 M 43 ZeroCERT

49805 2020-12-17 15:17 vbc.exe  

ae8d9001b6fc7686c84fb7cd58d95894


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself DNS 		3.4 M 18 ZeroCERT

49806 2020-12-17 15:15 suf.hta  

3bc3c371d30b1a8633a3dbb3069e86ad


VirusTotal Malware suspicious privilege Check memory WMI unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName 		2 5.0 M 4 guest

49807 2020-12-17 15:08 suf.hta  

3bc3c371d30b1a8633a3dbb3069e86ad


VirusTotal Malware crashed 		1.0 4 guest

49808 2020-12-17 10:05 document.doc  

01c8f989db53ea3a342cc16ede71e06f


VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		1 6 5.2 M 27 ZeroCERT

49809 2020-12-17 10:04 http://www.hahae.co.kr/new3/IS...  

06cfdaf0990fcd6ace527e1ae005e36f


Dridex VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 3 4.6 ZeroCERT

49810 2020-12-17 09:50 winlog.exe  

926682b2da9a8406bcb427da6a9e00ac


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Trojan DNS Software 		1 2 8 14.4 M 46 ZeroCERT

49811 2020-12-17 09:49 diego.png.exe  

d8a449d9a8aa11d58db91e3dc2387595


VirusTotal Malware unpack itself DNS 		2.4 M 17 ZeroCERT

49812 2020-12-17 09:37 svchost.exe  

d543a59ba12985acaf4134c3ff427b86


NetWireRC VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization Windows ComputerName DNS Cryptographic key DDNS Software 		2 1 16.8 M 43 ZeroCERT

49813 2020-12-17 09:36 prosperx.scr  

9c13e16c165b2a914fd342729e7e919c


VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		1 9.0 M 23 ZeroCERT

49814 2020-12-17 09:18 prosperx.scr  

9c13e16c165b2a914fd342729e7e919c


VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		1 9.0 M 23 ZeroCERT

49815 2020-12-17 09:16 OSW.exe  

f0e54257937a0cce319faf635a3e1f98


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs ComputerName 		2.4 M 15 ZeroCERT

keyword