popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7231 2021-04-13 16:19 regasm.exe  

7166ec978025327fdb93b5b0d030da8c


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 12.6 10 ZeroCERT

7232 2021-04-13 16:20 FbApl.jpg  

2c2cb2aa0782874d3c14cdd6f063f979


Process Kill FindFirstVolume CryptGenKey Antivirus VirusTotal Malware powershell suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process AppData folder Windows ComputerName DNS Cryptographic key 		2 10.2 M 12 ZeroCERT

7233 2021-04-13 16:21 winlog.exe  

196192ae86384d7ffa0ea7e43ec7d640

VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder 		3.2 M 29 ZeroCERT

7234 2021-04-13 16:22 invoice_533512.doc  

deb5aa8655bc71b6c4e23b82fd44f067

VirusTotal Malware exploit crash unpack itself Exploit DNS crashed 		3.6 M 23 ZeroCERT

7235 2021-04-13 16:24 new.exe  

c36a3651ef04581af4045653f06112f0


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		2 2 8.4 M 18 ZeroCERT

7236 2021-04-13 16:24 svchost.exe  

10a6ee4d2adc0ebf2c35aa538c391622

VirusTotal Malware unpack itself Remote Code Execution DNS 		2.6 M 25 ZeroCERT

7237 2021-04-13 16:41 a9e09cd67ad4df01_zhxpwnkb2xox5...  

38b02c707606809973c80710a99fcd07

VirusTotal Malware Checks debugger unpack itself 		1.4 11 r0d

7238 2021-04-13 18:09 regasm.exe  

7166ec978025327fdb93b5b0d030da8c

Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 12.6 M 10 r0d

7239 2021-04-14 07:44 %c4%90%e1%bb%81%20C%c6%b0%c6%a...  

826864ae301ac28e4a146cfd90ec473e

Malware download VirusTotal Malware Malicious Traffic unpack itself Windows DNS 		1 1 6 5.4 29 ZeroCERT

7240 2021-04-14 08:01 vbc.exe  

6cf0200d66b943e0c41ce00807ffe6c8

FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted ICMP traffic unpack itself Remote Code Execution DNS 		18 24 3 8.8 28 ZeroCERT

7241 2021-04-14 08:06 .................................  

dae55a5d59ed3f95a35a9ad4f633b358

FormBook Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		22 24 7 12 4.4 M 27 ZeroCERT

7242 2021-04-14 10:02 damianox.exe  

3534cff2da4426a7b51d85b1296f0490


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed 		10.6 M 21 ZeroCERT

7243 2021-04-14 10:04 data.pdf  

e891577b2d323d94f32ccc6bc52eadd9

VirusTotal Malware DNS 		1 3.4 M 43 ZeroCERT

7244 2021-04-14 10:09 wealthx.exe  

f00ffaeabd21162b932ee541d469adff


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Tofsee Windows ComputerName DNS Cryptographic key 		2 2 3 4.4 M 35 ZeroCERT

7245 2021-04-14 13:45 https://newblogheresee.blogspo...  

885b4b76fea2a5416dacad19f6c6a200


Antivirus Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		27 22 2 4.2 ZeroCERT

keyword