popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
50026 2020-11-27 17:33 update.exe  

75dd85a6d1389e53fb125ebd9d2711a3


VirusTotal Malware unpack itself malicious URLs DNS 		3.4 M 45 ZeroCERT

50027 2020-11-27 17:22 svchost.exe  

5dedc928f9f5e3a4c59490e79bcf0773


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		8.0 M 20 ZeroCERT

50028 2020-11-27 17:21 9.exe  

a5b4252c8bac59ad90a543ec1f2e4a7a


VirusTotal Malware Check memory Checks debugger unpack itself malicious URLs 		2.8 M 60 ZeroCERT

50029 2020-11-27 17:20 sunny.exe  

e8b400e9bb145f6cf0082982cfaeee60


VirusTotal Malware unpack itself RCE DNS crashed 		2.8 M 38 ZeroCERT

50030 2020-11-27 17:18 Mvyfnzkjh1.exe  

654cecf1ecadee45d5bfe723fadd3224


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows ComputerName Cryptographic key crashed 		3.0 M 21 ZeroCERT

50031 2020-11-27 15:07 알씨.lnk  

e4239bed4f59ce6fa4245ecd10a658bb


Creates shortcut unpack itself WriteConsoleW 		1.4 ZeroCERT

50032 2020-11-27 07:52 https://hotfixssearch.com/Font...  

8b7586880fcaf6b52aa4512506924121


Dridex Malware Code Injection exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 3 4.2 13 ZeroCERT

50033 2020-11-26 13:48 Xrghtofaye8.exe  

c16ce47c6812e6d526909c4cfd3ef1bc


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		1 2 1 3.6 M 32 ZeroCERT

50034 2020-11-26 13:34 xpertpancake.exe  

a46cbc94fc5553868d63469acad6747f


VirusTotal Malware Buffer PE Code Injection Malicious Traffic Check memory Checks debugger buffers extracted RWX flags setting unpack itself Disables Windows Security Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows DNS Cryptographic key crashed 		5 3 1 11.0 M 18 ZeroCERT

50035 2020-11-26 13:33 tasksmgr.exe  

7f9e3202a1d949772c5e5d003fc4e88c


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs WriteConsoleW IP Check Tofsee Ransomware Windows Browser Tor Email ComputerName Cryptographic key Software crashed keylogger 		6 6 1 15.2 M 28 ZeroCERT

50036 2020-11-26 13:31 Wzdgpx2.exe  

9750537a76d3cd8981eb129559dd8e81


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName 		1 2 1 3.2 M 19 ZeroCERT

50037 2020-11-26 13:28 svchost.exe  

69513930e28e86aae5bcfa92f6b89262


VirusTotal Malware malicious URLs WriteConsoleW DNS 		1 4.4 M 65 ZeroCERT

50038 2020-11-26 13:26 run.exe  

68cb8eb46036dee49f5dbcb95594660a


VirusTotal Malware PDB Check memory Creates executable files AppData folder malicious URLs WriteConsoleW installed browsers check Browser 		2 7.2 M 66 ZeroCERT

50039 2020-11-26 12:17 prowarzstepgodz.exe  

4f9226e8dc633386bfb1e4a201b732ac


Malware download Malware PDB suspicious privilege Malicious Traffic Creates executable files AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser DNS Downloader 		3 8 8.0 M ZeroCERT

50040 2020-11-26 12:16 prowarzgalaxyz.exe  

aeb8c6e4bd873e955e0a4868ad38e540


Malware download VirusTotal Malware PDB suspicious privilege Malicious Traffic Creates executable files ICMP traffic AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser DNS Downloader 		3 8 10.0 M 65 ZeroCERT

keyword