popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5686 2021-03-07 21:50 cred.dll  

c041d665d945d635300af02e97eb9cff


FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Malicious Traffic Check memory Checks debugger unpack itself Email DNS Software 		2 2 6.0 M 39 ZeroCERT

5687 2021-03-07 21:51 clipper.exe  

4b932f40941f6db7383af06d84d21ce1


VirusTotal Malware AutoRuns Check memory Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution 		5.8 M 49 ZeroCERT

5688 2021-03-07 21:54 local28.exe  

de84d306ca9d35321f98a6d26fc35275


VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		3.6 20 ZeroCERT

5689 2021-03-07 21:55 kitkatrootbot.exe  

d082b3a44d7a40cf843b7a7a476a7d41


VirusTotal Malware PDB 		2.2 M 51 ZeroCERT

5690 2021-03-07 21:57 scr.dll  

6551b9cf0ee7bc283476c82afe8efc85


VirusTotal Malware Checks debugger buffers extracted unpack itself DNS 		1 1 1 3.4 M 50 ZeroCERT

5691 2021-03-07 21:57 micro.exe  

36cabdb6675e5bebf48dc3924e043f9a


Browser Info Stealer Malware download FTP Client Info Stealer Pony VirusTotal Email Client Info Stealer Malware suspicious privilege Malicious Traffic Creates executable files Windows utilities Collect installed applications AppData folder malicious URLs WriteConsoleW installed browsers check Zeus Windows Update Browser Email Trojan Software Downloader 		2 3 8 9.8 M 61 ZeroCERT

5692 2021-03-07 22:01 x86.dll  

1ba871c1a93cabf46febf30fdb4cad1e


VirusTotal Malware PDB 		1.0 M 27 ZeroCERT

5693 2021-03-08 09:03 A4ge7vE97nKzwZk.exe  

4bf1d28524782e3de6d241c2bb625b5e


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 1 14.2 38 ZeroCERT

5694 2021-03-08 09:04 conhost.exe  

0a31ae5882697455a071f73191ed661c


VirusTotal Open Directory Cryptocurrency Miner Malware Cryptocurrency Malicious Traffic Check memory Checks debugger Creates executable files unpack itself malicious URLs sandbox evasion Windows Exploit Browser ComputerName Firmware DNS 		2 3 6 9.2 39 ZeroCERT

5695 2021-03-08 09:11 A4ge7vE97nKzwZk.exe  

4bf1d28524782e3de6d241c2bb625b5e


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		2 3 1 15.2 38 ZeroCERT

5696 2021-03-08 09:12 inst_all.exe  

7ae05cc2d2a31d9dfa7edbf6beef674e


Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.8 ZeroCERT

5697 2021-03-08 09:16 Rq9UwX3Sxdm9bAfW.exe  

7f8a15aca0965d3ef7f5e36245ee20fa


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 6 1 15.2 20 ZeroCERT

5698 2021-03-08 09:16 Tester.exe  

3ca0d5a355b972927a2398440d58a001


VirusTotal Malware PDB Check memory Checks debugger unpack itself malicious URLs DNS 		2.8 4 ZeroCERT

5699 2021-03-08 10:59 regasm.exe  

0a8ff8379ea5957d89a01ea84130c372


Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 7 1 9.6 M 48 조광섭

5700 2021-03-08 11:09 regasm.exe  

0a8ff8379ea5957d89a01ea84130c372


Loki Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files AppData folder malicious URLs sandbox evasion installed browsers check Browser Email ComputerName Software 		1 2 7 1 9.6 M 48 조광섭

keyword