popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
49846 2020-12-15 18:19 kingtroupx.scr  

d16ccfd5f5e6cd6a6324c79c9a66a90a


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs Windows DNS Cryptographic key 		6.6 M 40 guest

49847 2020-12-15 18:19 kdotx.scr  

4ddf98cd8e5a012c02850f0a988adf2c


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs Windows Cryptographic key 		5.8 M 34 guest

49848 2020-12-15 18:11 JFjolfjed_.exe  

61ae277818f7f258b41cee010f3914d2


VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs Interception DNS crashed 		1 4 6.4 M 39 guest

49849 2020-12-15 18:11 hktestfile.scr  

7da4f5e17791a774131c3c97538a2495


VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		7.8 M 20 guest

49850 2020-12-15 16:18 heavy.exe  

d3858ef6f7ab89450aaab1690885da3b


VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName DNS Cryptographic key 		2 3 1 15.2 M 37 r0d

49851 2020-12-15 15:39 heavy.exe  

d3858ef6f7ab89450aaab1690885da3b


VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		2 4 1 16.2 M 25 ZeroCERT

49852 2020-12-15 15:38 fortyseven.scr  

ffb62e258c1d595d7de22792aef45cca


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs Windows Cryptographic key 		5.4 M 18 ZeroCERT

49853 2020-12-15 15:22 fortyseven.scr  

ffb62e258c1d595d7de22792aef45cca


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs Windows Cryptographic key 		5.4 M 18 ZeroCERT

49854 2020-12-15 15:02 DIEN CT AP001-2020-DEC15.scr  

cdb5263c2d9c614ff624decc25c2d15b


Browser Info Stealer Email Client Info Stealer Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check Windows Browser Email ComputerName DNS 		1 16.2 guest

49855 2020-12-15 14:44 DOC_69061004.doc  

ce9a45e819d63dfea62902796a33a307


Vulnerability VirusTotal Malware Malicious Traffic unpack itself malicious URLs Tofsee 		1 15 3 4.6 M 44 ZeroCERT

49856 2020-12-15 14:41 binl.exe  

963f555140e20e291c2fac67a5186c15


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		12 13 9.8 M 18 ZeroCERT

49857 2020-12-15 14:40 DEKK.scr  

96415c7cc22dc59c3c112c02b3fecf2e


VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 2 1 5.6 M 32 ZeroCERT

49858 2020-12-15 14:33 cax.exe  

a88c0408e7888f549e40940279758fa6


VirusTotal Malware Malicious Traffic RWX flags setting unpack itself malicious URLs Tofsee Interception DNS crashed 		1 4 1 6.4 M 38 ZeroCERT

49859 2020-12-15 14:33 binl.exe  

963f555140e20e291c2fac67a5186c15


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.6 M 18 ZeroCERT

49860 2020-12-15 13:06 bin2.exe  

4c512f97ee6ca51c5e68d7b3d107bc61


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		9 10 10.2 M 24 ZeroCERT

keyword