popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5536 2021-03-02 15:36 document2.doc  

2fdf771221253c034cb69f52209d9de3


Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself malicious URLs Windows Exploit DNS crashed Downloader 		1 6 5.2 M 26 ZeroCERT

5537 2021-03-02 15:38 F6RTDU8mL5raqwH.pdf.exe  

8c57f9d8979fbf2747ad0cc1408dd133


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS keylogger 		2 12.8 M 25 ZeroCERT

5538 2021-03-02 16:02 febsc.exe  

d982bc6d34d36e1d584c8541b9fd3ab8


VirusTotal Malware unpack itself malicious URLs Remote Code Execution 		2.6 M 57 ZeroCERT

5539 2021-03-02 16:04 febs.exe  

ba08ebebc0859783501f5c5ad2e22425


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion DNS 		16 17 1 7.4 M 20 ZeroCERT

5540 2021-03-02 16:15 file.exe  

e6d1e080cea89eab46ccd90418b62ec7


VirusTotal Malware unpack itself 		2.4 M 37 ZeroCERT

5541 2021-03-02 16:15 regasm.exe  

43f9fd0e3e8bf66bee9581e616f870f5


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files AppData folder malicious URLs AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software crashed 		1 2 6 10.4 M 22 ZeroCERT

5542 2021-03-02 16:36 regasm2.exe  

3ec57bc71a3024b83bcbed9ec1a85888


VirusTotal Malware unpack itself malicious URLs 		2.6 M 28 ZeroCERT

5543 2021-03-02 16:37 RPI_Scanned_701.pdf.exe  

e4dfcc8b181667438f4df1b788929e0f


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.6 M 25 ZeroCERT

5544 2021-03-02 16:39 RPI_Scanned_01507.jpg.exe  

eb75677a28024f4bbc9cab2c69894c9d


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 17.0 M 27 ZeroCERT

5545 2021-03-02 18:14 scan.exe  

e9dcdd1b1719d0b6784ce1cae84c200e


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Tor ComputerName DNS Cryptographic key crashed 		11.8 M 37 ZeroCERT

5546 2021-03-02 18:15 https://zoomba619.blogspot.com...  

9c804308bb43d9f9942d16382b47d50a


VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		28 21 2 5.0 ZeroCERT

5547 2021-03-02 18:17 scr.dll  

4e812d5fdec0e51f6eadade33a73aeef


VirusTotal Malware Malicious Traffic Checks debugger buffers extracted unpack itself DNS 		1 1 4.6 M 54 ZeroCERT

5548 2021-03-02 18:18 scan.exe  

e9dcdd1b1719d0b6784ce1cae84c200e


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		10.0 M 37 ZeroCERT

5549 2021-03-02 18:23 slim.exe  

212cc44592f59e68dc35b99ac02505e1


VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows keylogger 		2 7.8 M 43 ZeroCERT

5550 2021-03-02 18:24 slim2.exe  

6e3931892ecdec7410c508a5989c864a


FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Remote Code Execution DNS 		4 8 1 8.4 32 ZeroCERT

keyword