Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
9661	2024-05-28 10:01	applovin_exo_ic_subtitle_off.x... 540c412edf326139392594877d0fcfbf Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.2			guest

9662	2024-05-28 10:01	applovin_exo_ic_subtitle_on.xm... 807dca5f8993fe9235ced68aa5ff46d6 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

9663	2024-05-28 10:00	applovin_exo_ic_subtitle_on.xm... 807dca5f8993fe9235ced68aa5ff46d6 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

9664	2024-05-28 10:00	applovin_exo_ic_speed.xml 38afc050777f4820124521f888a0561f Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

9665	2024-05-28 09:59	applovin_exo_ic_subtitle_off.x... 540c412edf326139392594877d0fcfbf Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.2			guest

9666	2024-05-28 09:58	applovin_exo_ic_skip_previous.... 502d9d6e632de992a431618fcc3f6947 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

9667	2024-05-28 09:57	applovin_exo_ic_skip_previous.... 502d9d6e632de992a431618fcc3f6947 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

9668	2024-05-28 09:57	applovin_exo_ic_speed.xml 38afc050777f4820124521f888a0561f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

9669	2024-05-28 09:57	3.exe dba41f91114792a95067817ad837f4ab Generic Malware Malicious Library PE File PE32 VirusTotal Malware unpack itself				1.6	M	25	ZeroCERT

9670	2024-05-28 09:56	Setup.exe ae47c12b9320e702a9ce243193494554 Generic Malware Malicious Library UPX AntiDebug AntiVM PE File PE32 FTP Client Info Stealer VirusTotal Malware Telegram MachineGuid Code Injection Malicious Traffic Check memory WMI unpack itself Windows utilities Collect installed applications suspicious process AppData folder sandbox evasion WriteConsoleW anti-virtualization installed browsers check Tofsee Windows Browser ComputerName DNS Software	2 Keyword trend analysis	5	3	10.8	M	18	ZeroCERT

9671	2024-05-28 09:55	applovin_exo_ic_settings.xml 62e17c87882af2b994f9054d0b3fd4d9 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

9672	2024-05-28 09:55	applovin_exo_ic_settings.xml 62e17c87882af2b994f9054d0b3fd4d9 Downloader Create Service Socket DGA Http API ScreenShot Escalate priviledges Steal credential PWS Hijack Network Sniff Audio HTTP DNS Code injection Internet API persistence FTP KeyLogger P2P AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

9673	2024-05-28 09:54	s.exe bc6d39d7372c8f38fcc60cf3ce2a48f1 Generic Malware Malicious Library Downloader Malicious Packer UPX PE File PE32 OS Processor Check VirusTotal Malware Check memory unpack itself crashed				2.0	M	51	ZeroCERT

9674	2024-05-28 09:54	applovin_exo_ic_skip_next.xml 4663384a093d8077e134a4eb66aa6c82 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

9675	2024-05-28 09:54	applovin_exo_ic_skip_next.xml 4663384a093d8077e134a4eb66aa6c82 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest