popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
50056 2020-11-26 10:01 Bbyzuwhvoljsm1.exe  

883025ad08af47c1efac400822932857


VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName DNS 		1 3 1 4.0 M 21 ZeroCERT

50057 2020-11-26 09:31 ach.vbs  

7eb75ac29bcdb9b04ffd7be21be218c0


Malware powershell Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces malicious URLs WriteConsoleW Windows Java ComputerName DNS Cryptographic key DDNS 		6 3 14.4 M ZeroCERT

50058 2020-11-26 09:31 a14.exe  

3eafc3e74deeffaccc2a203154265a30


Malware download Amadey FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows Email ComputerName DNS Software 		3 1 5 11.8 M 34 ZeroCERT

50059 2020-11-26 07:54 http://195.3.146.180/cia.exe  

a7d58a3a9f2ff3e1fefd69ed12cceeb1


Dridex VirusTotal Malware Code Injection Malicious Traffic Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed Downloader 		1 7 6.6 M 49 ZeroCERT

50060 2020-11-25 18:36 winlog2.exe  

953183f2f75bd5550052ec78c16f1f28


VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows 		5 10 9.0 M 24 ZeroCERT

50061 2020-11-25 18:32 winlog.exe  

a3369a332aebbd578c291cc27ccb354b


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser Email ComputerName Software 		1 2 7 1 17.0 M 44 ZeroCERT

50062 2020-11-25 18:31 winlog2.exe  

953183f2f75bd5550052ec78c16f1f28


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows 		9.2 M 24 ZeroCERT

50063 2020-11-25 18:28 whe.exe  

095e1574fea1e95a9ed568d2e679fb77


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed 		8.4 M 52 ZeroCERT

50064 2020-11-25 18:28 vbc2.exe  

ec26b497c9a213858ee08585ff4b3f10


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Software 		1 2 7 14.0 M 30 ZeroCERT

50065 2020-11-25 18:22 vbc.exe  

f3d05ab1f7e10173609506ba7f343cd6


VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		1 2 1 4.6 M 11 ZeroCERT

50066 2020-11-25 18:22 svchost.exe  

3093fbc1285eae874e39161553540c6c


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs 		1 2 8.2 M 18 ZeroCERT

50067 2020-11-25 18:19 svchost.exe  

3093fbc1285eae874e39161553540c6c


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.4 M 18 ZeroCERT

50068 2020-11-25 18:16 regasm.exe  

2c779eb8a99417d4512c130b00b0dbf0


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Software 		1 2 9 14.8 M 20 ZeroCERT

50069 2020-11-25 18:13 https://zoomba619.blogspot.com...  

c89486438fea2dd19f18900689a2ea43


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		30 21 3 4.6 ZeroCERT

50070 2020-11-25 18:11 guy1.exe  

9721f911ecb8a06c0f244f7ff35dbde2


VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Ransomware Windows Tor ComputerName DNS crashed 		2 3 13.4 M 26 ZeroCERT

keyword