popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7411 2021-04-20 09:38 qtPrQU1KxWmlfKW.exe  

2462f3500619d7caeb9ad8bc02e6bf0c


Malicious Packer Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		3 15.4 M 38 r0d

7412 2021-04-20 09:40 Wvlvhrl.pdf  

149b0568e10ba3994c5c88440221fb2e


Gen1 AsyncRAT backdoor Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Phishing Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName crashed Password 		12 6 7 17.6 18 ZeroCERT

7413 2021-04-20 09:40 Mwjhem.pdf  

e3fb74ce4008f4d48cefbb730b6885a8

FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs DNS crashed 		8 8 1 2 11.2 M 9 ZeroCERT

7414 2021-04-20 09:40 winlog.exe  

e0510b1d4dae20508467f238ba1e338e


AsyncRAT backdoor Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName DNS Cryptographic key Software 		1 3 9 14.4 M 23 ZeroCERT

7415 2021-04-20 09:42 Iyjomdb_Signed_.xls  

bebcbeef93c5ee64473336c98c6a13c4

VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted RWX flags setting unpack itself Tofsee Interception Windows ComputerName DNS Cryptographic key crashed 		1 5 1 11.8 52 ZeroCERT

7416 2021-04-20 09:43 bin.pdf  

b4e443daba6d844cfaba63ca17ff5a09


Formbook FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic unpack itself 		5 10 1 3.2 43 ZeroCERT

7417 2021-04-20 09:44 Zyxtp.pdf  

2e2eba416b6ec3efaace0621e8e229d2

FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs DNS crashed 		2 4 1 10.2 15 ZeroCERT

7418 2021-04-20 09:46 Zeqenylvg.pdf  

d20d0d39b52c812da0ae519d68aa889b


Gen1 AsyncRAT backdoor Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW anti-virtualization VM Disk Size Check installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		10 5 7 18.2 16 ZeroCERT

7419 2021-04-20 09:48 Zzsvkpq.pdf  

542f3ea693d61187bd10db0376a6b3e7


Gen1 AsyncRAT backdoor Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check Tofsee OskiStealer Stealer Windows Browser Email ComputerName DNS crashed Password 		10 5 5 18.0 22 ZeroCERT

7420 2021-04-20 11:26 DqPW3xsn1NfCPt4.exe  

fb9576c5e5f4cbfc8c4a754c6ffdfb81


Generic Malware VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		12.2 M 36 r0d

7421 2021-04-20 15:23 word.exe  

bfe860c06b77a5a1525654be5187d336

VirusTotal Malware unpack itself sandbox evasion 		3.0 M 43 ZeroCERT

7422 2021-04-20 15:50 setupapp.exe  

73eb70ca5994df6e2766bb5b799f04ec

VirusTotal Malware suspicious privilege WMI unpack itself Tofsee ComputerName DNS 		5 16 1 7.0 M 54 ZeroCERT

7423 2021-04-20 15:56 Indian Cooking Recipe.doc  

8c940517b09b4483abbf01905fea95bc

Vulnerability VirusTotal Malware buffers extracted exploit crash unpack itself Exploit crashed 		4.6 23 ZeroCERT

7424 2021-04-20 16:01 참가신청서양식.doc  

ed9aa858ba2c4671ca373496a4dd05d4


VBA_macro Vulnerability VirusTotal Malware unpack itself 		3.8 30 ZeroCERT

7425 2021-04-20 16:08 Indian Cooking Recipe.doc  

8c940517b09b4483abbf01905fea95bc

Vulnerability VirusTotal Malware buffers extracted exploit crash unpack itself Exploit crashed 		4.6 23 ZeroCERT

keyword