popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5581 2021-03-03 13:19 igbak.exe  

5810d01a17cd49d2da37080dfba1768a


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		8.8 M 19 ZeroCERT

5582 2021-03-03 13:25 poll.hta  

d0fdd620eeacbc52c13d58f349aec56c


VirusTotal Malware malicious URLs 		1 1.2 M 6 ZeroCERT

5583 2021-03-03 13:26 PI_613_Scanned_20.jpg.exe  

debdd7a769a1701fc4bcf9e4e70a1c04


FormBook Malware download VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process AppData folder malicious URLs Windows ComputerName DNS Cryptographic key 		10 17 1 16.0 M 35 ZeroCERT

5584 2021-03-03 13:35 SPE_010_317_041.pdf.exe  

25e061381c6e2503e84950f3c76b3c3e


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 16.0 M 28 ZeroCERT

5585 2021-03-03 13:35 vbc.exe  

e5801fb21e3794003ee72bf1de727e10


VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		13.0 M 29 ZeroCERT

5586 2021-03-03 13:43 Zbfuzznn.exe  

6de779f5005c94b57b3d8c72765d9f40


VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory buffers extracted Creates executable files RWX flags setting unpack itself malicious URLs Tofsee Windows Remote Code Execution 		1 2 1 10.4 M 24 ZeroCERT

5587 2021-03-03 18:31 8JPnP.txt.exe  

83f295f4d0465b4efaf2aac92c4b5b60


VirusTotal Malware 		2.0 M 50 ZeroCERT

5588 2021-03-03 18:31 01vxMGBNKTbu5Ue.exe  

b0e9496e7a623911ebe1c4c40dbbfb45


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		3.8 M 22 ZeroCERT

5589 2021-03-03 18:34 AjtHT1KX27Eo8gi.exe  

d56ef4d442be64791f3e6203a7f90d12


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.2 M 25 ZeroCERT

5590 2021-03-03 18:34 AKO.exe  

df66528d8bc2c14d5ed869189c6a6a39


VirusTotal Malware DNS 		1.6 M 31 ZeroCERT

5591 2021-03-04 09:29 effo.exe  

6e3d5d13c1d248c9cf05d5843f524d5a


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		4.2 M 30 ZeroCERT

5592 2021-03-04 09:29 Doxxxx.exe  

06215612f2b3fd8c268c210e735d2125


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows DNS Cryptographic key 		4.6 M 22 ZeroCERT

5593 2021-03-04 09:44 regasm.exe  

2b460a809e16bca0a8f2fb0e0805bf7c


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Malicious Traffic Check memory Creates executable files AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 4 1 8.4 M 27 ZeroCERT

5594 2021-03-04 09:44 GS9WJGgVACddyM2.exe  

3dbe27149b26d428147405303e576785


VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		4.0 M 30 ZeroCERT

5595 2021-03-04 09:47 svchost.exe  

d7d2cf7ff6b631bdb62ac5aac428cd95


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Checks Bios Detects VirtualBox suspicious process malicious URLs VMware anti-virtualization Windows ComputerName Cryptographic key Software 		12.2 11 ZeroCERT

keyword