popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7381 2021-04-20 07:39 Nnojr.exe  

0223c7c933d538790ea29c9975490088


PWS .NET framework Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 13.2 21 ZeroCERT

7382 2021-04-20 07:41 Fsbey.exe  

8ab4c430e65defdd7b9975db28d3c92d

FormBook Malware download Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows crashed 		14 13 2 8.8 ZeroCERT

7383 2021-04-20 07:41 Ddsfrkgc.pdf  

764abd8daf6dddba262e3bbae25fdbf5


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		3 8 4 14.2 22 ZeroCERT

7384 2021-04-20 07:46 7tg4gI0X1rZJQv4.exe  

58985086d10dfa3409f29940e0d74453

Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser ComputerName Cryptographic key crashed 		12.2 26 ZeroCERT

7385 2021-04-20 07:49 Pvcjjru.exe  

6581f25476a8e4009877ba7498489ef6


Gen1 AsyncRAT backdoor Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName crashed Password 		9 5 6 1 19.4 M 23 ZeroCERT

7386 2021-04-20 07:51 qtPrQU1KxWmlfKW.exe  

2462f3500619d7caeb9ad8bc02e6bf0c

Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		16.8 M 24 ZeroCERT

7387 2021-04-20 07:52 MqE94TGiHwDIxvk.exe  

99b38cc4fbd844a51c826c406fe31921

Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName Cryptographic key crashed 		12.8 M 23 ZeroCERT

7388 2021-04-20 07:54 K5wSxlyIcuJsAzY.exe  

f246fcdfbc29f0f80d54f7cd8f99b8f7

Browser Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key crashed keylogger 		14.0 M 22 ZeroCERT

7389 2021-04-20 09:02 catalog-134300255.xlsm  

c1bbead8915e662c20f05437a1966028

Check memory unpack itself suspicious TLD Tofsee crashed 		6 2 3.2 ZeroCERT

7390 2021-04-20 09:03 catalog-1356110994.xlsm  

8b7f402856f3d80cb0d041a26f35ec99

Check memory unpack itself Tofsee DNS crashed 		6 2 3.4 ZeroCERT

7391 2021-04-20 09:04 catalog-1321576138.xlsm  

0b6cef78cf09fe70881452faab47918f

Check memory unpack itself Tofsee crashed 		6 2 2.8 ZeroCERT

7392 2021-04-20 09:05 catalog-1301901571.xlsm  

b7a0b0ca21ea1ec602751681d5c60b11

Check memory unpack itself Tofsee DNS crashed 		6 2 3.4 ZeroCERT

7393 2021-04-20 09:18 iTTtz8O2sCqf.php  

b1f4f7c4f2839fccc054552041944d72

VirusTotal Malware PDB 		1.4 19 ZeroCERT

7394 2021-04-20 09:20 juv2ijivv.tar  

98c9f60ca8a6fe5d149e8b103b254cee


Gen2 Gen1 VirusTotal Malware PDB unpack itself crashed 		1.4 5 ZeroCERT

7395 2021-04-20 09:20 uiatx1wc.zip  

17d87654aea66ba8a0d416be95fac1b4


Gen2 Gen1 VirusTotal Malware PDB unpack itself DNS crashed 		2.0 6 ZeroCERT

keyword