Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
50551	2020-11-11 09:36	f44.exe 1db6bd4d13cb9966e8875b3812aef71d Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency MachineGuid Check memory ICMP traffic Collect installed applications malicious URLs sandbox evasion anti-virtualization IP Check installed browsers check Ransomware Browser ComputerName Software	1 Keyword trend analysis	4	1		9.6	M	57	SFPark

50552	2020-11-11 09:33	document.doc 265e5d523f64cf36e62d7b23a919ff09 Dridex TrickBot VirusTotal Malware exploit crash unpack itself malicious URLs Kovter Exploit DNS crashed		1	1		4.4		25	SFPark

50553	2020-11-11 09:29	vbc.exe 39cf586cdbe945fd902a5b10a1e879cd VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows					10.2		48	admin

50554	2020-11-11 09:22	Contract_6588.doc 7dbd8ecfada1d39a81a58c9468b91039 Vulnerability VirusTotal Malware unpack itself malicious URLs					4.0		38	admin

50555	2020-11-11 09:15	http://tennysondonehue.com/f44... 1db6bd4d13cb9966e8875b3812aef71d Dridex VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed	1 Keyword trend analysis	3	5		5.0	M	54	admin

50556	2020-11-11 08:10	http://tennysondonehue.com/f44... 1db6bd4d13cb9966e8875b3812aef71d VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities Windows Exploit DNS crashed	1 Keyword trend analysis	4	2		4.6			guest

50557	2020-11-10 22:05	up8qn5vw.txt.exe 831c361b1f54a876c98fb6bf3cd5d688 VirusTotal Malware PDB unpack itself DNS crashed		1			2.4		15	SFPark

50558	2020-11-10 22:05	save.exe 7ebd8264cdecb8f522b51b0490a3f901 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS Cryptographic key		1			8.2	M	25	SFPark

50559	2020-11-10 22:01	https://u.teknik.io/TNHYt.txt 8d58498de34e8674d319dc578b7b5f87								SFPark

50560	2020-11-10 18:48	save.exe 7ebd8264cdecb8f522b51b0490a3f901 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS Cryptographic key		1			8.0	M	11	SFPark

50561	2020-11-10 18:45	08.gif.exe 323bf86aeeab08e1388d51cffc172f53 unpack itself RCE					1.4	M		SFPark

50562	2020-11-10 18:45	08.gif.exe 323bf86aeeab08e1388d51cffc172f53 unpack itself RCE					1.4	M		SFPark

50563	2020-11-10 18:45	Attack.jpg.exe 030a7dc53599b256819fba82df6f1c84					0.4	M		SFPark

50564	2020-11-10 18:20	https://surfel.tk/Kpwlnsp4.exe 0e4f29b6131f087e7fab5592df2c8a5a VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed	1 Keyword trend analysis	4	2		5.6			SFPark

50565	2020-11-10 17:56	updatewin1.exe 5b4bd24d6240f467bfbc74803c9f15b0 VirusTotal Malware unpack itself malicious URLs Windows RCE					4.0	M	65	SFPark