popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
50371 2020-11-17 18:31 411.exe  

2398469593c9dec9561a556b30f6d63a


VirusTotal Malware Buffer PE AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		14.4 M 29 ZeroCERT

50372 2020-11-17 17:51 바이든 시대 북한 비핵화 협상의 또 하나암초 - 북한 ...  

c0c9b52ce51df46422e4fa14178beeec


VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process malicious URLs Interception Browser ComputerName 		2 7.4 M 30 guest

50373 2020-11-17 17:14 바이든 시대 북한 비핵화 협상의 또 하나암초 - 북한 ...  

164839a72dba24d189c1d990e61a53e2


unpack itself malicious URLs 		2.0 guest

50374 2020-11-17 17:10 http://naver.midsecurity.org/a...  

c731e705a5baf082bf3ffc72b6b77699


Dridex VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		10 12 3 5.0 2 guest

50375 2020-11-17 09:51 pegoos.exe  

e8b534f89b0f23446b410e47ded4a76f


Malware download VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Tofsee Windows Browser ComputerName WordPress Downloader 		8 6 5 9.4 M 20 ZeroCERT

50376 2020-11-17 09:50 uinm.exe  

9a14f154a2bd1be68a91bab0118cdd6b


Malware Malicious Traffic Check memory Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows 		2 2 4.2 M ZeroCERT

50377 2020-11-17 09:49 pegs.exe  

42e13e9fb45e01c567b6d3c34caab781


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Tofsee Windows Browser Email ComputerName RCE DNS Software Downloader 		7 4 4 13.0 M 27 ZeroCERT

50378 2020-11-17 09:35 pegasun.exe  

e73e257a21c192c734e5fda707f526c4


VirusTotal Malware malicious URLs 		1 2.8 M 51 ZeroCERT

50379 2020-11-17 09:34 peggs.exe  

393e5a7fe1d4a719890fe46e7049301a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory buffers extracted ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW installed browsers check Tofsee Windows Browser Email ComputerName DNS Software Downloader 		8 4 4 13.8 M 43 ZeroCERT

50380 2020-11-17 09:28 LinK13112020.msi  

9f566a164a5c6ae046c24d0e911dc577


VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger unpack itself malicious URLs AntiVM_Disk VM Disk Size Check ComputerName 		1 2 3.8 M 6 ZeroCERT

50381 2020-11-17 09:27 nass.exe  

d9e4ff69934ce995feaa9e54e0d5ad07


suspicious privilege Check memory Checks debugger unpack itself malicious URLs 		2.4 M ZeroCERT

50382 2020-11-17 09:19 document.doc  

a19eabf7fb153b7d9481cbd5a2957e5d


VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Exploit DNS crashed Downloader 		1 1 2 5.2 M 27 ZeroCERT

50383 2020-11-17 09:19 e3txkz.pdf.exe  

a19e9a48a5adb409f2eed82694231a7a


VirusTotal Malware PDB unpack itself DNS crashed 		2.4 M 12 ZeroCERT

50384 2020-11-17 09:09 document-1559797301.xlsb  

b716cc176fe7a6c664ee428bcda1704e


unpack itself malicious URLs 		2.0 ZeroCERT

50385 2020-11-17 09:08 161120.gif.exe  

62796a07ec927fa798d39dbcaa16a967


unpack itself RCE 		1.4 M ZeroCERT

keyword