popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
8191 2021-05-20 10:22 554312cx.msi  

4e0a36a723ccaeb484afe5ecc7a4a889


MSOffice File PE File PE32 suspicious privilege Check memory Checks debugger unpack itself Windows utilities AntiVM_Disk VM Disk Size Check Windows ComputerName 		3.0 M ZeroCERT

8192 2021-05-20 15:18 k5dy7ow2EwylXhP.exe  

a1fbfc2302350826dd8fe8576b9db9cd


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 M 23 ZeroCERT

8193 2021-05-20 16:33 winlog.exe  

b56e5eef4c0f60b0cdf971935b81893a


PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 2 9 8.2 M 12 ZeroCERT

8194 2021-05-20 16:34 Delivery%20Order%208323673.xls  

4100f7280e2ec85db09ee5e67b15b9dd


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		6 4 2 4.0 M 30 ZeroCERT

8195 2021-05-20 16:35 fax_Documents.exe  

5e9c34075c2eb3d3db131e1227383f1e


Malicious Packer .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself 		3 2.2 34 ZeroCERT

8196 2021-05-20 16:36 PO%2068601112.xls  

c389608ec63d30c2d36486bd7db8668f


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee 		12 20 2 3.2 M 27 ZeroCERT

8197 2021-05-20 16:36 Inv%2006687243.xls  

5186a21d30bbf28909683c4767597481


VBA_macro MSOffice File VirusTotal Malware unpack itself Tofsee DNS 		12 20 2 4.8 M 24 ZeroCERT

8198 2021-05-20 16:39 invoice_996451.doc  

bee4631c31d5682a91174ee18d7c9335


RTF File doc VirusTotal Malware exploit crash unpack itself Tofsee Exploit DNS crashed 		1 2 1 3.6 M 27 ZeroCERT

8199 2021-05-20 16:41 mn.exe  

f421782c826203212a35308f4b155bad


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS crashed 		11.0 M 38 ZeroCERT

8200 2021-05-20 16:44 fax_Documents.zip  

e9ab849de3862d15c03f2dc2535a2fe0

VirusTotal Malware DNS 		1.4 M 24 ZeroCERT

8201 2021-05-20 16:57 fax_Documents.exe  

5e9c34075c2eb3d3db131e1227383f1e


Malicious Packer .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself DNS 		2.8 34 ZeroCERT

8202 2021-05-21 08:11 Main.jpg  

d598749a8c86b1cdd313ff6c86626c86


RTF File doc DLL PE File OS Processor Check PE32 Vulnerability VirusTotal Malware buffers extracted exploit crash unpack itself AppData folder Exploit DNS crashed 		4.4 17 ZeroCERT

8203 2021-05-21 08:33 b.dot  

7eb32d81afb5598c9ab0c6651955c42d


RTF File doc AntiDebug AntiVM Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory exploit crash unpack itself Windows Exploit DNS crashed 		1 1 5 4.8 28 ZeroCERT

8204 2021-05-21 08:35 00.exe  

83377601918cdc76c76ed36c06a01546


PE File OS Processor Check PE32 VirusTotal Malware Check memory Checks debugger Creates executable files AppData folder DNS 		1 5.4 52 ZeroCERT

8205 2021-05-21 08:41 netwire-988.exe  

c225922e8ec40ccca7d491fa57ece50b


PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Windows ComputerName DNS Cryptographic key 		2.8 10 ZeroCERT

keyword