popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5491 2021-02-27 12:00 5.exe  

b447b44c38f8958a0185f46756488f41


VirusTotal Malware unpack itself 		2.2 21 ZeroCERT

5492 2021-02-27 12:02 Document_88856.xlsb  

35daad13970c241669bcf83c3f8a231e


VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself malicious URLs Tofsee DNS crashed 		2 5 1 6.0 14 ZeroCERT

5493 2021-02-27 12:03 Document_88899.xlsb  

10360f4838885037c303c5d1e54a40c1


VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself malicious URLs Tofsee DNS crashed 		2 5 1 6.6 13 ZeroCERT

5494 2021-02-27 12:05 Document_88926.xlsb  

10360f4838885037c303c5d1e54a40c1


VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself malicious URLs Tofsee DNS crashed 		3 5 1 1 6.0 M 13 ZeroCERT

5495 2021-02-27 12:06 Document_89658.xlsb  

35daad13970c241669bcf83c3f8a231e


VirusTotal Malware Malicious Traffic Check memory Creates executable files unpack itself malicious URLs Tofsee DNS crashed 		2 5 1 1 6.6 M 14 ZeroCERT

5496 2021-02-27 12:08 iblGozHrAyPEMKc.exe  

d0946249b861c18765875f25655f19ed


VirusTotal Malware AutoRuns Creates executable files RWX flags setting unpack itself AppData folder Windows crashed 		3.6 M 29 ZeroCERT

5497 2021-02-27 12:09 joex.exe  

9decf18e822a2b03210185facccba692


VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs DNS 		1 2 1 3.8 M 22 ZeroCERT

5498 2021-02-27 12:11 911.exe  

5984589fdb8024bbce6a2a9cdae0a08b


unpack itself 		1.2 ZeroCERT

5499 2021-02-27 12:12 load.exe  

e4f88c1aa49a3b0810e1b48a2ba6a6e8


VirusTotal Malware unpack itself DNS 		1 2.6 M 54 ZeroCERT

5500 2021-02-27 14:51 m87.dll  

d48404abfb5c8a7bac7f9f619da899e9


Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName DNS crashed 		1 5 4 7.8 M 16 ZeroCERT

5501 2021-02-27 14:51 m88.dll  

833298fdcdf7b634c734d88adbb6517f


Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName DNS crashed 		1 4 3 1 7.2 M 5 ZeroCERT

5502 2021-03-01 10:54 mon81.dll  

b01f4d6e58860cbfbad674024ae98af0


VirusTotal Malware PDB Check memory unpack itself crashed 		3.0 M 34 ZeroCERT

5503 2021-03-01 10:54 mon80.dll  

3cee87ebc7068a187eb004eb95f98bcd


VirusTotal Malware PDB Check memory unpack itself DNS crashed 		3.4 M 21 ZeroCERT

5504 2021-03-01 11:00 mon82.dll  

c6e8053b71cc7a923f038d41ee8a5784


VirusTotal Malware PDB unpack itself 		2.4 M 28 ZeroCERT

5505 2021-03-01 11:02 mon89.dll  

cc840b676f30f145c6f9083561beaea4


Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName Remote Code Execution DNS crashed 		1 5 4 1 8.0 M 9 ZeroCERT

keyword