popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10111 2021-07-15 17:59 Invoice%20325274%20from%20Quic...  

ab0ba30c618d88e8a9134e0a7c43fc31


VBA_macro MSOffice File VirusTotal Malware Check memory unpack itself suspicious process 		1 3.0 23 ZeroCERT

10112 2021-07-15 18:01 mo.txt.ps1  

580d0ff9258cad5f8b7f78e3ea408b56


NPKI Antivirus Malware Malicious Traffic 		3 2 1.2 ZeroCERT

10113 2021-07-15 18:03 ng.txt.ps1  

7edfaf4ec4273c26945ca50287210f5e


NPKI Antivirus Malware Malicious Traffic 		3 2 1.2 ZeroCERT

10114 2021-07-15 18:03 BIO.dotm  

3a0d0f6141bedffca45843ef81c73d10


NPKI VBA_macro Antivirus AntiDebug AntiVM VirusTotal Malware Malicious Traffic buffers extracted 		4 2 3.0 17 ZeroCERT

10115 2021-07-15 18:05 BIO.dotm  

e98252b09d1eeee99ed087a3ea8668cd


VBA_macro Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 9.2 17 ZeroCERT

10116 2021-07-15 18:05 1Ptfo0FZUMT7hlK.exe  

bc302d910397e2d1092e47029d8f35df


Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		4 12 8.6 44 ZeroCERT

10117 2021-07-15 18:16 BIO.dotm  

e98252b09d1eeee99ed087a3ea8668cd


VBA_macro Antivirus AntiDebug AntiVM VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 2 9.6 17 ZeroCERT

10118 2021-07-15 18:25 ki.txt.ps1  

21a653a49317c76d6c23e9ac85b9467a


NPKI Antivirus Malware Malicious Traffic 		2 2 1 1.2 ZeroCERT

10119 2021-07-15 18:47 file11.bin  

222d9a3950c1dd4e9d659e51e46ca608


PE File PE32 VirusTotal Malware PDB unpack itself Windows crashed 		2.6 22 ZeroCERT

10120 2021-07-15 20:01 jun.js  

ceb58144b89ea3c7d42611b451e21cb7


AgentTesla browser info stealer Google Chrome User Data Antivirus ScreenShot Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI heapspray Creates shortcut ICMP traffic unpack itself Windows utilities Check virtual network interfaces suspicious process AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check Windows Browser Email ComputerName DNS Cryptographic key keylogger 		1 5 20.4 2 ZeroCERT

10121 2021-07-15 22:35 000628389672_1.xlsm  

be08be775737dbd2ef07cd65b3c95d7e


VBA_macro VirusTotal Malware RWX flags setting unpack itself 		2 2.4 29 ZeroCERT

10122 2021-07-15 22:39 0712_4408305114.doc  

68da25a05ddc6b1e7e04fd5fa4cf76db


VBA_macro MSOffice File OS Processor Check RWX flags setting unpack itself 		3 2.0 ZeroCERT

10123 2021-07-15 23:07 0712_4408305114.doc  

68da25a05ddc6b1e7e04fd5fa4cf76db


VBA_macro MSOffice File OS Processor Check Malware Malicious Traffic Checks debugger buffers extracted Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 7.6 ZeroCERT

10124 2021-07-15 23:09 000628389672_1.xlsm  

be08be775737dbd2ef07cd65b3c95d7e


VBA_macro VirusTotal Malware RWX flags setting unpack itself 		2.4 26 ZeroCERT

10125 2021-07-15 23:17 0712_1535841550.doc  

116c69c018829ee0342b177523161cd4


VBA_macro MSOffice File OS Processor Check VirusTotal Malware Malicious Traffic Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		3 4 1 9.4 34 ZeroCERT

keyword