Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
601	2020-07-08 16:16	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files RWX flags setting unpack itself Windows utilities Check virtual network interfaces AppData folder malicious URLs Interception Windows	5 Keyword trend analysis Info http://ocsp.trustwave.com/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBQ1mI4Ww4R5LZiQ295pj4OF%2F44yyAQUyk7dWyc1Kdn27sPlU%2B%2BkwBmWHa8CEQCSuHRPcc7Q4mxyo9jV2SWy http://ko-KR.altoolsinst.altools.com/start/setupset.aspx http://ko-KR.altoolsinst.altools.com/show/public_addin.aspx https://cdn1.estsecurity.com/setup/ALYac/ALYac25.exe https://spynet2.microsoft.com/AntiMalwareServices/2/SpynetReportSrvc.asmx	9			8.2	M

602	2020-07-08 17:47	https://app.gomtv.com/gom/NEW_... cdf0ee07031e51f2fb8648e1abe9f1f4 VirusTotal Malware Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed	1 Keyword trend analysis	2			4.0	M	3

603	2020-07-08 18:19	http://veyron.ir/gregx/frankx.... 87712606fb9aaef0299a5ec915de4544 VirusTotal Malware Code Injection buffers extracted Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs sandbox evasion Windows Exploit crashed	1 Keyword trend analysis	2			8.2	M	49

604	2020-07-09 07:51	http://doorbhai.com/wp-keys.ph... 7d23bb67055769142aa57e851fe8c83d VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Windows	1 Keyword trend analysis	2			3.0	M

605	2020-07-09 08:37	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	1 Keyword trend analysis	4			10.8	M	24

606	2020-07-09 08:38	Bill_jule25_proposal2.xls fd53d69f88f0b9981cda1c0f1a52b75a VirusTotal Malware unpack itself malicious URLs					2.2	M	38

607	2020-07-09 09:47	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	2 Keyword trend analysis	5			10.8	M	24

608	2020-07-09 09:48	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities AntiVM_Disk VM Disk Size Check Windows ComputerName DNS	1 Keyword trend analysis	2			6.4	M

609	2020-07-09 09:54	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files exploit crash unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows Exploit ComputerName DNS crashed	2 Keyword trend analysis	5			10.6	M

610	2020-07-09 10:02	http://91.198.220.225/microsof... 489f36c666847f46e05370a3ec37566f VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName DNS	1 Keyword trend analysis	3			8.8	M

611	2020-07-09 10:06	QUOTATION_49027352-pdf.exe 2714c2eac0417bec3b7186c77a5ad059 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself suspicious process malicious URLs WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key crashed		1			12.6		41

612	2020-07-09 10:15	Opencapture v7.0 Setup.exe c534ef899cd8782854db5409ac807e97 Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName Trojan Banking crashed keylogger	10 Keyword trend analysis Info http://opencapture.net/update/homepage.php?mode=1 http://ww12.opencapture.net/ls.php http://opencapture.net/update/ocupdate.php?ver=MTkyLjE2OC41Ni4xMDFbMDgtMDAtMjctQ0MtRkEtNTld http://ww12.opencapture.net/favicon.ico http://opencapture.net/update/homepage.php?mode=1 http://ww12.opencapture.net/track.php?click=a652a129c5571e206b09827c3e58f34a4a24eb8a&domain=opencapture.net&uid=MTU5NDI1NzIyNS41Njg5OmI5ZmYzOTI0OWE5ZmJhYmM5ZTVmZDBkM2IzOGQxZTFlYzcwMThlN2ZjMjZhYWVjNGIyNTc5MjQ1ODQ4NDgyNmQ6NWYwNjZmNDk4YWU2Mw%3D%3D&ts=fHx8ZDQxZDh8fHx8fHx8NWYwNjZmNDk4OTllMXx8fDE1OTQyNTcyMjUuOTkxMXxhMDVjMGI4OGZlMjU3NTk2NDI1ZmJmNzViOWEwNWE3YzkyYWZhMmIzfHx8fHwxfHx8MHx8fHwwfHx8fHwwfDB8fHx8fHx8fHx8MHwxfHwwfDB8MXwwfDB8VzEwPXx8MXxXMTA9&kw=&search=&pcat=&rxid=&bucket=&clientID=&adtest=off http://opencapture.net/ http://ww12.opencapture.net/track.php?domain=opencapture.net&toggle=browserjs&uid=MTU5NDI1NzIyNS41Njg5OmI5ZmYzOTI0OWE5ZmJhYmM5ZTVmZDBkM2IzOGQxZTFlYzcwMThlN2ZjMjZhYWVjNGIyNTc5MjQ1ODQ4NDgyNmQ6NWYwNjZmNDk4YWU2Mw%3D%3D http://parkingcrew.net/assets/scripts/js3.js http://ww12.opencapture.net/ https://clients2.google.com/service/check2?crx3=true&appid=%7B430FD4D0-B729-4F61-AA34-91526481799D%7D&appversion=1.3.35.452&applang=&machine=1&version=1.3.35.452&userid=&osversion=6.1&servicepack=Service%20Pack%201	12 Info susa.shridevi-yng.com(54.174.38.189) opencapture.net(72.52.179.174) clients2.google.com(172.217.24.142) katie.ttnrd.com(3.90.125.85) amanda.ttnrd.com(3.90.125.85) parkingcrew.net(185.53.179.29) ww12.opencapture.net(185.53.179 172.217.24.142 185.53.179.29 52.202.231.67 54.152.245.247 72.52.179.174			9.0	M

613	2020-07-09 10:17	Opencapture v7.0 Setup.exe c534ef899cd8782854db5409ac807e97 Malware Code Injection Malicious Traffic Check memory Checks debugger Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk VM Disk Size Check human activity check Windows ComputerName Trojan Banking crashed	4 Keyword trend analysis	4			8.6	M

614	2020-07-09 11:55	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Code Injection Creates executable files unpack itself Windows utilities Windows	1 Keyword trend analysis	4			2.6	M

615	2020-07-09 11:59	https://cdn1.estsecurity.com/s... f809c38f0febca37c04811e2dc51ff8e Code Injection Creates executable files unpack itself Windows utilities Windows	1 Keyword trend analysis	2			2.6	M

First
Previous
41
42
43
44
45
46
47
48
49
50
Next
Last
Total : 48,198cnts