popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5431 2021-02-25 14:09 winlog.exe  

3687f254dea97e11b049d99739f4ade0


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 12.6 M 45 ZeroCERT

5432 2021-02-25 14:10 xxxx1_2021-02-16_11-51.exe  

7fc4870a54a69a822f35e8649a4e4d1b


VirusTotal Malware unpack itself malicious URLs DNS 		3.4 M 57 ZeroCERT

5433 2021-02-25 14:18 0321.exe  

6b77ec3dfa530f69ff49f06496232009


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Tofsee Windows DNS 		1 3 1 12.0 M 30 ZeroCERT

5434 2021-02-25 14:18 angelx.exe  

30f445bb737fd0200966f10b79ebc98a


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Ransomware Windows Browser Tor Email ComputerName DNS Cryptographic key Software crashed keylogger 		3 2 3 17.6 M 37 ZeroCERT

5435 2021-02-25 14:26 AroX3.txt.exe  

4ef47260c033dd6fc7b0e4a744456209


VirusTotal Malware RWX flags setting unpack itself 		1.4 M 17 ZeroCERT

5436 2021-02-25 14:27 eNwOl.txt.exe  

e18dbe57194dd717d54a907ba8e6d3e1


VirusTotal Malware RWX flags setting unpack itself DNS 		2.6 M 20 ZeroCERT

5437 2021-02-25 14:30 hCazo.txt.exe  

2724e3847ab9d043159c984a612d4173


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed 		13.8 M 32 ZeroCERT

5438 2021-02-25 14:36 TFppy.txt.exe  

acfcbd916fa04787e4388b339592dd78


VirusTotal Malware RWX flags setting unpack itself 		2.0 M 20 ZeroCERT

5439 2021-02-25 14:43 https://ifyouarebadtheniamyour...  

1bbbe8c7df7d8f63cc120c38cfe90fbc


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		29 21 2 5.0 ZeroCERT

5440 2021-02-25 14:44 6sfsgfsgqwert.exe  

77be0dd6570301acac3634801676b5d7


VirusTotal Malware ICMP traffic IP Check 		1 4 1 4.2 M 61 ZeroCERT

5441 2021-02-25 14:55 free_vbucks.exe  

a7bcf7ea8e9f3f36ebfb85b823e39d91


VirusTotal Malware Code Injection Check memory RWX flags setting exploit crash unpack itself Windows utilities suspicious process malicious URLs sandbox evasion WriteConsoleW Tofsee Windows Exploit DNS crashed 		5 9 1 8.2 M 59 ZeroCERT

5442 2021-02-25 15:04 Nod32.exe  

245153c656b6482404938345df15b354


AutoRuns MachineGuid Check memory Checks debugger unpack itself Windows Cryptographic key crashed 		2.6 M ZeroCERT

5443 2021-02-25 15:05 invoice_4152112.doc  

2c15d6b5dacee38f2b9d5bb1236f0bc3


Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		2 1 6 5.4 M 33 ZeroCERT

5444 2021-02-25 15:06 notas.exe  

5e144be1ef6e59108b2d597105e3b9ed


Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows DNS Cryptographic key DDNS 		4 4 1 1 9.8 M ZeroCERT

5445 2021-02-25 15:08 setupgo.exe  

ad606bf50981d15cea3647d3d089128e


VirusTotal Malware Windows crashed 		2 2.8 M 38 ZeroCERT

keyword