popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7636 2021-04-27 16:46 http://union.jctrip.cn/wp-incl...  

8d7c388e144427e46654e1f1d75de590


AgentTesla Vulnerability VirusTotal Malware MachineGuid Code Injection Malicious Traffic RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 10 1 8.2 M guest

7637 2021-04-27 16:48 test.exe  

d2be9aab83d330520dbd61c621ffede3


PWS .NET framework Malicious Library AsyncRAT backdoor Dridex TrickBot VirusTotal Malware Kovter DNS 		2 3 1.2 M 49 r0d

7638 2021-04-27 17:15 regasm.exe  

4d1a1e438fee82fce40619bbb27f4209

Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 7 1 8.6 M 35 r0d

7639 2021-04-27 17:19 regasm.exe  

4d1a1e438fee82fce40619bbb27f4209

Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 7 1 8.6 M 35 r0d

7640 2021-04-27 17:30 regasm.exe  

4d1a1e438fee82fce40619bbb27f4209

Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 7 1 8.6 M 35 r0d

7641 2021-04-27 17:39 regasm.exe  

4d1a1e438fee82fce40619bbb27f4209

Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName Software 		1 2 7 1 8.6 M 35 r0d

7642 2021-04-28 07:42 195145.exe  

5b5a730628dc9eba2c12530d225c2f70

VirusTotal Malware Malicious Traffic RWX flags setting suspicious process ComputerName DNS 		2 1 4.4 10 ZeroCERT

7643 2021-04-28 09:13 vbc.exe  

7dcb1f913eec25bc07aced21d9c1dc5d


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.8 M 29 ZeroCERT

7644 2021-04-28 09:25 tret.exe  

ee1db7f0ad39df1af6eb5166447b1471

VirusTotal Malware unpack itself Remote Code Execution DNS crashed 		2.8 22 ZeroCERT

7645 2021-04-28 09:25 zabax.exe  

5ad242aab1bad0f0128498aee4878c2f


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Cryptographic key 		7.8 26 ZeroCERT

7646 2021-04-28 09:28 reg.exe  

4223fe49bf944c3dcc33270c0ddf6033


PWS .NET framework Loki Malicious Library AsyncRAT backdoor Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities malicious URLs installed browsers check Windows Browser Email ComputerName Trojan Cryptographic key Software 		1 2 8 14.2 19 ZeroCERT

7647 2021-04-28 09:28 mazx.exe  

342d651660cf2b0587d25f343aff786f


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		2 2 1 14.8 19 ZeroCERT

7648 2021-04-28 09:29 dl2.exe  

c4539adb4566822ab8dfe45aa3d5ca63

VirusTotal Malware Remote Code Execution DNS 		1.8 M 7 ZeroCERT

7649 2021-04-28 09:32 ...................dot  

d89c98c484e9c5a9b95118076be9258a

Malware download VirusTotal Malware MachineGuid Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed 		1 2 5 6.2 M 28 ZeroCERT

7650 2021-04-28 09:40 mazx.exe  

342d651660cf2b0587d25f343aff786f

Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		4 2 1 2 13.2 M 19 guest

keyword