popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5656 2021-03-05 14:09 vbc.exe  

e51d22ebb56c5f204b9f275337fbcfde


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		7.8 M 25 ZeroCERT

5657 2021-03-05 14:12 win32.exe  

3dad99752800d2418553870b6e932c66


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		8.2 M 42 ZeroCERT

5658 2021-03-05 14:14 winlog.exe  

c8cb664fed47b0347a3e70df2d119327


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion DNS 		8 18 1 7.6 M 31 ZeroCERT

5659 2021-03-05 14:16 winlog2.exe  

b4f934c7e8c8c57260cfb11476ebff84


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files AppData folder malicious URLs installed browsers check Browser Email ComputerName Software 		1 2 7 8.8 M 21 ZeroCERT

5660 2021-03-05 17:41 3w.exe  

bec6b3783f500e425d69ec474de49d72


VirusTotal Malware AutoRuns suspicious privilege Creates executable files unpack itself malicious URLs Windows 		1 4 4.4 58 ZeroCERT

5661 2021-03-05 17:42 winlog.exe  

8da730e67b8525b10717a673a151ae81


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 7 13.6 M 29 ZeroCERT

5662 2021-03-05 18:11 1.hta  

36557ac562705433cd94c97fa409cf7c


Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 ZeroCERT

5663 2021-03-05 18:17 payment prove_pdf.bin  

103027ed80b1517d0a07aa9dc2239aa7


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder malicious URLs 		30 27 1 5.4 24 ZeroCERT

5664 2021-03-05 18:20 1.html  

36557ac562705433cd94c97fa409cf7c


Code Injection RWX flags setting unpack itself Windows utilities Windows 		2.2 ZeroCERT

5665 2021-03-06 09:20 8.iosssappp.exe  

df60756a8e33b721b357bd7242f4881a


Dridex TrickBot VirusTotal Malware Report suspicious privilege Malicious Traffic Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs Kovter ComputerName DNS crashed 		1 4 3 6.6 M 18 ZeroCERT

5666 2021-03-06 09:21 http://goaqaba.com/ccwidd/4426...  

d41d8cd98f00b204e9800998ecf8427e


VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 3 2 5.2 M ZeroCERT

5667 2021-03-06 09:47 ama.exe  

2615e1b91089b5c8fe7011eb447e5db1


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		9.8 M 25 ZeroCERT

5668 2021-03-06 09:47 regasm.exe  

4463feedd0b33e84f3e7454adba2c8ce


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 13.4 M 34 ZeroCERT

5669 2021-03-06 09:57 TAX-RELIEF.exe  

307e257292be5d47304c1712c8bd1342


VirusTotal Malware Check memory Checks debugger Creates executable files AppData folder malicious URLs sandbox evasion DNS DDNS 		2 1 4.4 M 20 ZeroCERT

5670 2021-03-06 09:58 vbc.exe  

12313985c4147b7a2e4b6945e270ff70


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 13.8 M 32 ZeroCERT

keyword