popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5701 2021-03-08 11:16 marxlo.exe  

d4768f13b1bd46461e9f1fdca905d794


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities AppData folder malicious URLs Windows Cryptographic key 		9.8 10 guest

5702 2021-03-08 11:21 ntB.dll  

4da066bbfe178014ed1042ce90b87ab0


VirusTotal Malware Checks debugger RWX flags setting unpack itself sandbox evasion 		3.8 M 52 조광섭

5703 2021-03-08 11:24 winlog5.exe  

57e47d9cc7e182ce53425dcf9f1c9dcc


Loki Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 6 1 13.4 M 51 조광섭

5704 2021-03-08 11:29 Update.exe  

808e1ade2dea30a742f120a5a26d6a32

VirusTotal Malware malicious URLs WriteConsoleW 		2 3.2 M 63 조광섭

5705 2021-03-08 11:42 chashepro3.exe  

c277ca9bda5cde270d97fb1cbe5568d0

Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files ICMP traffic RWX flags setting exploit crash unpack itself Windows utilities Checks Bios Collect installed applications Detects VMWare powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VMware anti-virtualization VM Disk Size Check installed browsers check Tofsee Ransomware Windows Exploit Browser ComputerName Firmware DNS Cryptographic key Software crashed 		5 10 2 21.6 M 48 조광섭

5706 2021-03-08 15:15 fre.php  

ea9f466d28c594dc4741469805fd440c

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 1 guest

5707 2021-03-08 15:15 chart.class.php  

556b2524384b1b773732cd9648a23b14

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		3 2 4.8 guest

5708 2021-03-08 15:16 GeoIP.dat  

aa73c65c8661963aac79f1f2ae16e910

Code Injection unpack itself Windows utilities malicious URLs Windows 		4 3.2 guest

5709 2021-03-08 15:17 geoip.inc  

bf1e7e0fd0b9755f974217e69c63a31a

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.2 guest

5710 2021-03-08 15:18 index.html  

d41d8cd98f00b204e9800998ecf8427e

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 4.8 guest

5711 2021-03-08 15:18 fre.php  

ea9f466d28c594dc4741469805fd440c

Code Injection unpack itself Windows utilities malicious URLs Windows DNS 		3 1 3.8 guest

5712 2021-03-08 15:20 chart.class.php  

556b2524384b1b773732cd9648a23b14

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 2 5.2 guest

5713 2021-03-08 15:20 GeoIP.dat  

aa73c65c8661963aac79f1f2ae16e910

Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		1 2 5.8 guest

5714 2021-03-08 15:20 fre.php  

ea9f466d28c594dc4741469805fd440c

 1.0 guest

5715 2021-03-08 15:20 geoip.inc  

bf1e7e0fd0b9755f974217e69c63a31a

Code Injection unpack itself Windows utilities malicious URLs Windows 		3 3.2 guest

keyword