popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6001 2021-03-17 07:41 water.php  

a4dc92b904b2b4b31960bf84614dad78


VirusTotal Malware 		0.6 14 guest

6002 2021-03-17 07:52 winlog.exe  

3d3c42f1e8978a60cdf179841d6734ad


FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself Windows utilities AppData folder sandbox evasion Windows 		10 16 1 7.6 M 10 guest

6003 2021-03-17 08:07 win32.exe  

72b6926647fba63ec22152929d3767fa


Azorult .NET framework Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 12.6 17 guest

6004 2021-03-17 09:06 KhhTVovqt6vEVrb.exe  

135c94b81172f08d8cb273ef52f635a6

VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		11.8 M 44 ZeroCERT

6005 2021-03-17 09:08 lll.exe  

a1e24b649f5b831d36c42f52e970ef0a


ftp Client info stealer email stealer Win Trojan agentTesla browser Google Chrome User Data Download management AsyncRAT backdoor VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		12.6 M 38 ZeroCERT

6006 2021-03-17 09:12 KhhTVovqt6vEVrb.exe  

135c94b81172f08d8cb273ef52f635a6

FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName 		3 6 1 11.8 M 44 ZeroCERT

6007 2021-03-17 09:12 lll.exe  

a1e24b649f5b831d36c42f52e970ef0a


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName DNS Cryptographic key crashed 		10.8 M 38 ZeroCERT

6008 2021-03-17 09:16 MKY.exe  

50779df624494704e7e2d1c2b821a127


Malicious Packer Generic Malware VirusTotal Malware RWX flags setting unpack itself anti-virtualization 		2.2 M 22 ZeroCERT

6009 2021-03-17 09:23 http://lunasier.tistory.com/  

6258ab538101bc185019a794ab77995a


Antivirus Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		72 41 3 4.6 ZeroCERT

6010 2021-03-17 09:29 mon128.dll  

8b35f94c42d50c31bf4edb764ca77b69


Emotet Trickbot Gen Dridex TrickBot VirusTotal Malware Report suspicious privilege MachineGuid Checks debugger buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process malicious URLs Tofsee Kovter ComputerName Remote Code Execution DNS 		1 6 5 7.8 M 43 ZeroCERT

6011 2021-03-17 09:31 mon129.dll  

4fc9c825d7f504f3db1608bc014a44e4


Emotet Trickbot Gen VirusTotal Malware Checks debugger buffers extracted RWX flags setting unpack itself suspicious process Remote Code Execution 		4.4 M 28 ZeroCERT

6012 2021-03-17 09:44 ooo.exe  

93855fc9adad9473b2063646abb132d8


Azorult .NET framework VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself malicious URLs 		2.8 M 18 ZeroCERT

6013 2021-03-17 10:02 regasm.exe  

f58c5379be474fc6f64828161083361d

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder malicious URLs sandbox evasion 		16 21 1 6.8 M 38 ZeroCERT

6014 2021-03-17 10:06 regasm2.exe  

a81c8325b042d9a25365023a8657ee67


Azorult .NET framework Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser ComputerName Cryptographic key 		11.8 M 20 ZeroCERT

6015 2021-03-17 10:14 regasm3.exe  

6e1b5a8549d3b44bf15ea19d83ecd759


Azorult .NET framework Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 13.2 M 18 ZeroCERT

keyword