popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6286 2021-03-21 19:09 fer8.exe  

4e228802bcb649751855c0bd9a35ab0d


VirusTotal Malware malicious URLs crashed 		1.8 M 22 ZeroCERT

6287 2021-03-21 19:13 engine-rawbin.exe  

56f4eeaef4814ace6c236ac620bc0663


Gen Browser Info Stealer Malware download FTP Client Info Stealer Azorult VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency MachineGuid Malicious Traffic Check memory Creates executable files Collect installed applications AppData folder malicious URLs sandbox evasion anti-virtualization installed browsers check Ransomware Browser Email ComputerName Software 		1 2 1 10.6 M 57 ZeroCERT

6288 2021-03-21 19:24 IMG_724_Scanned_603.pdf  

5c2cd6d19381ac5a4a517c2165b29813


ftp Client info stealer email stealer Win Trojan agentTesla browser Antivirus Google Chrome User Data AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		8 6 4 6 16.8 M 33 ZeroCERT

6289 2021-03-21 19:25 fkt.exe  

3b741d6798735efdae2d18c80716ee4b

VirusTotal Malware AutoRuns Code Injection Check memory Creates executable files ICMP traffic Windows utilities sandbox evasion Windows ComputerName DNS crashed 		1 6.6 M 27 ZeroCERT

6290 2021-03-22 09:00 sn1.exe  

4e228802bcb649751855c0bd9a35ab0d

VirusTotal Malware malicious URLs crashed 		2.0 M 33 ZeroCERT

6291 2021-03-22 09:05 PO_107658_200.pdf  

4ac557f524400a9007c6c8e6912e9e1f


ftp Client info stealer email stealer Win Trojan agentTesla browser Antivirus Google Chrome User Data AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		5 6 4 16.8 M 22 ZeroCERT

6292 2021-03-22 09:14 ss.exe  

91ee2afefdf066eae3aead061a8075ed

VirusTotal Malware unpack itself crashed 		2.2 M 33 ZeroCERT

6293 2021-03-22 09:17 VSX.exe  

d642f78e75dad522b4e70a3227d61ec7

VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself malicious URLs 		6.0 M 33 ZeroCERT

6294 2021-03-22 09:20 wmin.exe  

806ba19af21c27492a4e92e38d64c634


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key Software crashed 		1 3 1 17.8 M 28 ZeroCERT

6295 2021-03-22 09:45 22.dll  

649b5c913739cea195c7662ff412b8ce

VirusTotal Malware PDB 		1.4 M 50 ZeroCERT

6296 2021-03-22 09:50 22.dll  

649b5c913739cea195c7662ff412b8ce

VirusTotal Malware PDB 		1.4 M 50 ZeroCERT

6297 2021-03-22 09:59 PO_107658_200.pdf  

4ac557f524400a9007c6c8e6912e9e1f


Antivirus AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		5 6 4 3 17.0 M 22 Zero

6298 2021-03-22 10:02 WPG.exe  

6273ade4c3e0abd33473928d7a25b309


Azorult .NET framework VirusTotal Malware 		1.2 M 23 ZeroCERT

6299 2021-03-22 10:09 Documents550.xlsm  

c55996933c6e8ba7db93a76dec4f430e

VirusTotal Malware Checks debugger WMI unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS crashed 		1 7.2 30 ZeroCERT

6300 2021-03-22 10:18 Machos1.exe  

460c76892a939c1b7d563171c3b2d349


AsyncRAT backdoor VirusTotal Malware PDB MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces Tofsee DNS 		1 4 1 5.2 M 50 ZeroCERT

keyword