popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
52756 2020-07-29 17:13 ken.exe  

779a0ec54bcbbcce1bbf03390c78cfa8


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs 		7.6 M 21

52757 2020-07-29 16:32 swiftcopy.exe  

32cabf46ceff775a3523dfda9ade8fb7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser ComputerName DNS Software 		1 1 15.6 M 34

52758 2020-07-29 15:17 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Ransomware Interception Windows Exploit Browser ComputerName crashed 		8 9 13.2

52759 2020-07-29 15:10 swiftcopy.exe  

32cabf46ceff775a3523dfda9ade8fb7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser ComputerName DNS Software 		1 1 15.2 M 16

52760 2020-07-29 15:01 ff.exe  

da5e879220ffd4bc732fa76e25265fc1


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Software crashed 		6.2 M 49

52761 2020-07-29 14:49 9fc542be9b40ee6ce1bdf777140fcc...  

b4d654755e5fb496138ed0e9c4121e84


Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName DNS keylogger 		3 2 7.4

52762 2020-07-29 14:47 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files ICMP traffic exploit crash unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion Firewall state off VM Disk Size Check human activity check installed browsers check Ransomware Interception Windows Exploit Browser ComputerName crashed 		8 7 13.4

52763 2020-07-29 14:04 winruntime.exe  

532524e6b61b197d92f3bd4ed3331d3d


VirusTotal Malware AutoRuns suspicious privilege Malicious Traffic Check memory Checks debugger WMI unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		6 2 10.6 M 43

52764 2020-07-29 13:47 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		1 1 4.2

52765 2020-07-29 13:28 jiz.exe  

7eb55ba7c9b9c5529b81aa64d315cd64


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed 		6.6 M 45

52766 2020-07-29 13:20 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit crashed 		3 5 4.0

52767 2020-07-29 13:14 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit crashed 		3 5 4.0

52768 2020-07-29 13:09 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities AppData folder malicious URLs Windows Exploit crashed 		3 5 4.4

52769 2020-07-29 13:04 http://www.nalara1220.o-r.kr/m...  

543d9bb195c2df50e3dc076b6fdf95ef


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Windows 		5 4 3.0

52770 2020-07-29 13:02 KISA자료1.xlsx  

d95ae922fa3e71e6b5a37d418643f791


unpack itself 		1.2

keyword