popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7201 2021-04-13 10:21 vbc.exe  

ad93fd487510d127e039ca04ceea6181


VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted ICMP traffic unpack itself Remote Code Execution 		26 24 4 8.8 M 29 ZeroCERT

7202 2021-04-13 10:21 40.jpg  

5906b1fd9fb562ecb3c54a1ca1f6e50d


VirusTotal Malware DNS 		1.4 M 23 ZeroCERT

7203 2021-04-13 10:22 prun.exe  

78859832e79c6d7aedad2de7612b375c


Gen1 AsyncRAT backdoor VirusTotal Malware Code Injection buffers extracted unpack itself malicious URLs sandbox evasion Browser crashed 		2 8.0 M 52 ZeroCERT

7204 2021-04-13 10:24 C++%20Dropper.exe  

356dc1680475998c7c23e199f2c2e9ca

VirusTotal Malware PDB 		1.2 M 35 ZeroCERT

7205 2021-04-13 10:24 scan.exe  

90aced49ee9c5ce3fc9f47ba8fd7333d


Antivirus Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 12.6 M 29 ZeroCERT

7206 2021-04-13 10:26 loligang.spc  

1e73cf9148d10aef910af3800a6330af

VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself DNS 		4 3 4.0 M 38 ZeroCERT

7207 2021-04-13 10:30 win32.exe  

b2e46b8ad3081ee99c70acb3c1b17027

VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		18 24 2 5.4 M 22 ZeroCERT

7208 2021-04-13 11:24 delete.exe  

fca72b6de6d5d9eeab811974eb6a1dbc

VirusTotal Cryptocurrency Miner Malware Cryptocurrency PDB suspicious privilege Code Injection Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution crashed 		8.4 M 35 r0d

7209 2021-04-13 11:25 delete.exe  

fca72b6de6d5d9eeab811974eb6a1dbc


WinRAR VirusTotal Cryptocurrency Miner Malware Cryptocurrency PDB suspicious privilege Code Injection Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution crashed 		8.4 M 35 r0d

7210 2021-04-13 11:35 vbc.exe  

29e8627d7b80c21fc98c82314f3df5e2


Malicious Packer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Windows utilities AppData folder Windows Remote Code Execution 		20 24 8 11.0 M 50 r0d

7211 2021-04-13 14:42 ETL_126_072_60.pdf  

66a3e859b4c5a574c5007eb78f8adc63

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 54 guest

7212 2021-04-13 14:52 ETL_126_072_60.pdf  

66a3e859b4c5a574c5007eb78f8adc63

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 54 조광섭

7213 2021-04-13 14:54 ETL_126_072_60.pdf  

66a3e859b4c5a574c5007eb78f8adc63

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		2.8 54 조광섭

7214 2021-04-13 14:59 ETL_126_072_60.pdf  

66a3e859b4c5a574c5007eb78f8adc63

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 54 조광섭

7215 2021-04-13 15:08 ETL_126_072_60.pdf  

66a3e859b4c5a574c5007eb78f8adc63

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		2.2 54 조광섭

keyword