popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9556 2021-07-01 15:07 Dn2BawZf.php  

10eeac6d1588d51ee5495b70b45abad2


AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 4.2 M 8 ZeroCERT

9557 2021-07-01 15:16 x4pq7mWBd1EoIa.php  

b10f6a5dc20e493d684999d006b53bbe


Emotet UPX PE32 OS Processor Check PE File DNS 		0.8 ZeroCERT

9558 2021-07-01 15:17 figures.06.21.doc  

ea09b4c38b2e026a5e147c1801530775


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception 		1 2 7.0 11 ZeroCERT

9559 2021-07-01 15:19 file 06.30.2021.doc  

991198e66f488ec0a831c31ef5c2a3f4


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception DNS 		1 2 7.6 10 ZeroCERT

9560 2021-07-01 15:19 Li1J9kmyK3YE.php  

44cbf8e4cc5ccdbe05a7d4ddf022bf0f


Emotet UPX PE32 OS Processor Check PE File Malware Malicious Traffic DNS 		1 1 2.0 ZeroCERT

9561 2021-07-01 15:21 material.06.21.doc  

c17f947258355884f1d359e24733b92e


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory ICMP traffic RWX flags setting unpack itself suspicious process Interception DNS 		1 1 7.2 7 ZeroCERT

9562 2021-07-01 15:33 specifics,06.21.doc  

67092e0e7cae41a063ee9e7d71f0209f


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception DNS 		1 2 7.6 10 ZeroCERT

9563 2021-07-01 15:33 report_06.21.doc  

faf4b5f0994bd6a977ecb95bfabe8c19


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception 		1 2 7.0 11 ZeroCERT

9564 2021-07-01 15:35 require.06.30.21.doc  

ae17389c50df966455179ec5b5c3c75a


VBA_macro AntiDebug AntiVM Vulnerability VirusTotal Malware Code Injection Check memory RWX flags setting unpack itself suspicious process Interception DNS 		1 2 7.6 10 ZeroCERT

9565 2021-07-01 18:09 WeaponGrand.exe  

db2f659dc03c430d809eff66e99c42f8


VMProtect PE32 PE File VirusTotal Malware Check memory unpack itself 		3.2 46 ZeroCERT

9566 2021-07-01 18:09 ew.exe  

d0a3271d3966f4765b194b203abaf782


Generic Malware AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself DNS crashed 		3 4 1 8.8 20 ZeroCERT

9567 2021-07-01 18:12 dg.exe  

cf4451b3972a3a0c80ba775579c60de5


Generic Malware AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself crashed 		4 8 1 8.2 21 ZeroCERT

9568 2021-07-01 18:14 si.exe  

df75bedbb01fdfb56956fa33a46205dd


Generic Malware AntiDebug AntiVM PE32 .NET EXE PE File FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself crashed 		3 7 1 1 9.2 M 25 ZeroCERT

9569 2021-07-02 07:29 afjfhfdhfdhjfggh  

8c19e2bf5e1868d026594605f524f724


AntiDebug AntiVM Email Client Info Stealer Code Injection Check memory Checks debugger unpack itself Browser Email DNS 		3.6 ZeroCERT

9570 2021-07-02 07:35 afjfhfdhfdhjfggh  

8c19e2bf5e1868d026594605f524f724


Antivirus powershell Check memory RWX flags setting unpack itself ComputerName DNS 		1 1 2.6 ZeroCERT

keyword