popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6886 2021-04-02 16:29 월간KIMA2021_4월호군사안보0331.docx...  

fe4dd316363d3631c83c2995dd3775f4


Vulnerability VirusTotal Malware unpack itself 		8 2 2.8 15 r0d

6887 2021-04-02 16:51 kobu.arm7  

c15905677c3955ec1f0eb79face87f60


VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.4 14 ZeroCERT

6888 2021-04-02 16:53 1.dll  

5512180f20e8279acc4d71abbfeb2433


VirusTotal Malware Check memory Checks debugger unpack itself ComputerName 		1 1.6 10 ZeroCERT

6889 2021-04-02 16:55 cp.msi  

71714c975383be9d962b333987e4eed5


Antivirus VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		1 3.2 M 24 ZeroCERT

6890 2021-04-02 16:57 otb.msi  

1901561a32860ddf4c4206733e83cb7a


Antivirus VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName 		2.2 3 ZeroCERT

6891 2021-04-02 17:01 837a40c49a16ecd7ca4c60d41d69a7...  

8eeadc7c52554328bcbb4c49ddfc647b


Dridex Gene VirusTotal Malware 		1.6 35 r0d

6892 2021-04-02 17:20 https://pagina2.news/  

2cf4600610d150d23c349970c715eea2

VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 4.4 guest

6893 2021-04-02 17:55 01vxMGBNKTbu5Ue.exe  

b0e9496e7a623911ebe1c4c40dbbfb45


AsyncRAT backdoor VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.6 M 54 guest

6894 2021-04-02 17:57 01vxMGBNKTbu5Ue.exe  

b0e9496e7a623911ebe1c4c40dbbfb45


AsyncRAT backdoor VirusTotal Malware Buffer PE Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		3.6 M 54 guest

6895 2021-04-02 18:00 test.txt  

7e5ab48525e7e292ce3146e8e52e5a28

Check memory unpack itself 		1.0 guest

6896 2021-04-03 10:29 월간KIMA2021_4월호군사안보0330.docx...  

609c2473571bf703ce985b6e44b8e343

Vulnerability VirusTotal Malware unpack itself 		7 2 7 2.8 M 17 ZeroCERT

6897 2021-04-03 10:39 build.exe  

3484b25f2ba1dbb96d27992e52a1f042

Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency unpack itself sandbox evasion installed browsers check Interception Browser DNS Software 		1 5.6 49 ZeroCERT

6898 2021-04-03 10:39 44285,5327891204.dat  

929d37bb0f639425bf80dd1ce3dc73b9

Check memory crashed 		0.6 ZeroCERT

6899 2021-04-03 10:41 44285,5327891204.dat  

c158fc170ee9e86e01731354363238e5

Check memory DNS crashed 		1.2 M ZeroCERT

6900 2021-04-03 10:42 loaddd.exe  

f4787944e95596ad1847910ce4180a20


Gen1 Gen2 AsyncRAT backdoor VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows ComputerName Remote Code Execution DNS crashed 		5 3 11.2 M 32 ZeroCERT

keyword