popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49831 2020-12-16 16:17 1312.gif.2.exe  

d41d8cd98f00b204e9800998ecf8427e

 0.4 ZeroCERT

49832 2020-12-16 12:50 http://54.169.255.180/.cache/A...  

ff1f1a2332f563aebf955780642344f1


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder Tofsee Windows Exploit DNS crashed 		1 1 6 5.0 13 ZeroCERT

49833 2020-12-16 12:23 1SystemWindows.exe  

d100a087bc378ea7fb3afc39bc164984


VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Tofsee Windows DNS 		4 2 4 3.8 M 39 ZeroCERT

49834 2020-12-16 12:23 1312.gif.1.exe  

b2a9a4e1656bdb5749de4f228dc9f307


VirusTotal Malware 		1.8 M 41 ZeroCERT

49835 2020-12-16 11:06 XokBnqWMZ4B9pbd.exe  

e9dbec32351a5bd0a3f94b8314e4d958


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName DNS Software 		1 17.6 M 43 ZeroCERT

49836 2020-12-16 10:37 win32.exe  

f4fccdb6286107ca3592406e356a6b5e


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Trojan DNS Software 		1 2 10 1 15.0 M 38 ZeroCERT

49837 2020-12-16 10:37 vbc.exe  

ebc762f4d1d6557fcfb73fc7eb1d5b7a


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software 		1 2 7 1 14.2 M 46 ZeroCERT

49838 2020-12-16 09:55 Speeder_1.0.0.3_qd13.exe  

a6d2cae21d592a602211a854dc4dc91a


VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check installed browsers check Tofsee Browser ComputerName DNS 		45 16 1 10.6 M 13 ZeroCERT

49839 2020-12-16 09:50 SkIoKdBiDxtQ2g1.exe  

89a6ece185d652883f32474e5c0df7c7


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS DDNS 		2 1 14.8 M 47 ZeroCERT

49840 2020-12-16 09:46 SkIoKdBiDxtQ2g1.exe  

89a6ece185d652883f32474e5c0df7c7


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs WriteConsoleW Windows DNS DDNS 		2 1 15.6 M 47 guest

49841 2020-12-16 09:46 Rep_LI6.doc  

8e842b5a5672e46538f5d6fea2275579


Vulnerability VirusTotal Malware unpack itself malicious URLs Windows 		2 1 4.2 M 26 guest

49842 2020-12-16 09:15 regasm.exe  

b8561eed84f227c88c7b8d3a106be5ab


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName Trojan DNS Software 		1 2 10 1 15.2 M 49 guest

49843 2020-12-16 09:13 pdf.exe  

48a9add9e1b4b99548e564dfbdcb8a9f


VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Tofsee 		3 1 4.6 M 42 guest

49844 2020-12-16 09:11 KINO.exe  

e74426f4ab322e220a00be7558b892de


VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee ComputerName DNS 		1 2 1 5.4 M 21 guest

49845 2020-12-16 09:10 kingtroupxtwo.scr  

d19c1f5071b995ed4bdefa7dfa86a2f5


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		11.4 M 12 guest

keyword