popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5356 2021-02-22 19:02 win322.exe  

3c98031abb827791a6eac446d4e6e154


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		1 4 9.6 13 ZeroCERT

5357 2021-02-23 09:49 2.exe  

5c0331638e59621f50341ec30f80a4c0


Malware download VirusTotal Open Directory Malware AutoRuns Code Injection Check memory Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows Exploit Trojan 		4 10 7.8 M 47 ZeroCERT

5358 2021-02-23 09:50 1.exe  

96e2b84ac4e49605b7715abe0352b04b


Malware download VirusTotal Open Directory Malware AutoRuns suspicious privilege Code Injection Check memory Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows Exploit Trojan DNS 		4 10 10.2 M 53 ZeroCERT

5359 2021-02-23 09:55 3.exe  

ff7d3b6003c9058e40ae38a6a7efe40c


Malware download VirusTotal Open Directory Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check Windows Exploit Browser Advertising Trojan 		2 10 11.2 M 52 ZeroCERT

5360 2021-02-23 09:55 4.exe  

3095bf8189c4bbba126bd587ceb66893


VirusTotal Malware Check memory RWX flags setting sandbox evasion Browser Remote Code Execution DNS 		2 3.6 M 44 ZeroCERT

5361 2021-02-23 10:00 2228.exe  

0420435e01b432b69af26314d6faa99d


Malware download VirusTotal Open Directory Malware AutoRuns Code Injection Check memory Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder malicious URLs Windows Exploit Trojan 		4 11 7.8 M 48 ZeroCERT

5362 2021-02-23 10:00 ali.exe  

4cf00a84b2a96c9f35910063eaadf02d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		12.4 M 24 ZeroCERT

5363 2021-02-23 11:21 file1.jpg.exe  

bab5de876317b61245488f04d75ad33a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		16.0 M 40 ZeroCERT

5364 2021-02-23 12:44 daji.exe  

096da551ab960e72a876f4c922d017ac


VirusTotal Malware AutoRuns suspicious privilege unpack itself malicious URLs Windows 		3 6.2 M 52 ZeroCERT

5365 2021-02-23 12:46 IMG_01670_Scanned.jpg.exe  

bb78d2def4dedae9e7ab93082d1e5a56


FormBook Malware download VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process malicious URLs Windows ComputerName DNS Cryptographic key 		22 20 1 14.0 M 40 ZeroCERT

5366 2021-02-23 13:18 IMG_7742_Scanned.jpg.exe  

b68f5e610c36752a3803d8a8204159fb


FormBook Malware download VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows ComputerName Cryptographic key 		22 22 4 12.4 M 39 ZeroCERT

5367 2021-02-23 13:23 IMG_6078_SCANNED.jpg.exe  

98b7438e7128ce0e2e983e50f2a4f4ed


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c powershell Buffer PE suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 1 7 16.6 M 29 ZeroCERT

5368 2021-02-23 13:24 IMG_61061_SCANNED.jpg.exe  

96ee30ef07bdc81ad2362a4ec3dc6b2a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process malicious URLs Windows Browser Email ComputerName DNS Cryptographic key Software crashed 		15.2 M 37 ZeroCERT

5369 2021-02-23 13:32 IN90003844.exe  

f57d087472fdeac6df9751ad5d0c0965


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser Email ComputerName Software crashed keylogger 		11.2 M 59 ZeroCERT

5370 2021-02-23 13:32 IMG_71106_SCANNED.jpg.exe  

88e0de608b9deebe3aa0925029b0fde3


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 17.8 M 31 ZeroCERT

keyword