popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
52741 2020-07-30 09:39 http://factorialk.pp.ua/wp-adm...  


Code Injection unpack itself Windows utilities Windows 		1 2 2.2

52742 2020-07-30 00:15 harl.exe  

603a9d172499974f5dce0a3ce6365cd9


VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs crashed 		3.4 M 14

52743 2020-07-30 00:11 Doc_20200729_OYO975.doc  

43e0305c2cc8aaf8b50bb2e2c24e6efa


Vulnerability VirusTotal Malware unpack itself 		2.4 M 17

52744 2020-07-29 23:59 winlog.exe  

33d28d8be1d957a58d32a2100393d696


VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs crashed 		4.0 M 22

52745 2020-07-29 23:59 wop.exe  

301f883fe5145bad9b1e5044c691a7ba


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs Windows Browser Email ComputerName RCE DNS Cryptographic key Software crashed keylogger 		1 3 12.0 M 36

52746 2020-07-29 23:40 tpriv.ps1  

422390f87f4c83bb435dfeaa0db7bd9b


VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Auto service powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization Ransomware Windows Tor ComputerName DNS Cryptographic key 		11 7 24.2 M 9

52747 2020-07-29 23:38 invoice_25225.doc  

994c751f8ecc657be98920365929f4cf


Vulnerability VirusTotal Malware buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 5.0 23

52748 2020-07-29 23:30 jiz.exe  

7eb55ba7c9b9c5529b81aa64d315cd64


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed 		6.6 M 45

52749 2020-07-29 23:29 winruntime.exe  

532524e6b61b197d92f3bd4ed3331d3d


VirusTotal Malware AutoRuns suspicious privilege MachineGuid Check memory Checks debugger unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS 		1 9.4 M 43

52750 2020-07-29 23:24 ed.exe  

8b521c7037d401552437d5277327e0be


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Software crashed 		6.2 M 49

52751 2020-07-29 23:22 invoice.exe  

68d2139e5201ceddf36b35d25b8688ce


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows Browser Email ComputerName Software crashed keylogger 		13.2 M 16

52752 2020-07-29 23:06 kd4cpyp6.exe  

13a6a577d20a7d9a554b97111970612a


VirusTotal Malware AutoRuns PDB unpack itself Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Advertising ComputerName DNS Cryptographic key 		1 1 9.4 M 9

52753 2020-07-29 23:05 DOC_PO_07292020EX.doc  

51e3a656cf223b77ebcf7833ac887a90


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		2 2 4.4 M 24

52754 2020-07-29 18:10 bF7hIR6ROuc.exe  

cca93aa31231f3c2150e1a3adf93354e


Malware AutoRuns Malicious Traffic unpack itself Auto service malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check human activity check Windows Advertising ComputerName DNS Cryptographic key 		1 1 9.8 M

52755 2020-07-29 18:08 hov.exe  

af181018d702702ff23788f70c24d72d


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.6 M 24

keyword