popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
10291 2021-07-21 14:21 dmwa.jpg  

dc71ed81724056f7ee199d098356e155


Dbatloader Generic Malware Malicious Packer UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE32 PE Fi Emotet VirusTotal Malware Buffer PE AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		1 4 1 10.0 M 21 r0d

10292 2021-07-21 14:58 SCSKAppLink_dll  

b3a8c88297daecdb9b0ac54a3c107797


Lazarus Family UPX Malicious Library PE32 OS Processor Check DLL PE File VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2.0 30 ZeroCERT

10293 2021-07-21 16:17 file12.bin.exe  

a3cdbeb1d41c114bee6784c02ca42cd6


PE32 PE File VirusTotal Malware PDB unpack itself Windows crashed 		3.0 M 47 r0d

10294 2021-07-22 00:16 vitafoods.com Update.htm  

20b9f99a81f6edbda4253942ad50ba17


Admin Tool (Sysinternals etc ...) AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		4 4 2 4.6 1 guest

10295 2021-07-22 03:54 Expiry Notification July 21 20...  

7d8b845525ad8e4f8450065bb2a606f7


DGA Escalate priviledges KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM MSOffice File PNG Format Email Client Info Stealer MachineGuid Checks debugger RWX flags setting unpack itself installed browsers check Windows Browser Email Cryptographic key 		1 4.8 guest

10296 2021-07-22 03:54 Capture.PNG  

83425938267eae3b1052b32ff82b03c8


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PNG Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

10297 2021-07-22 03:55 vitafoods.com Update.htm  

20b9f99a81f6edbda4253942ad50ba17


BitCoin Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM MSOffic Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		4 4 2 5.2 1 guest

10298 2021-07-22 04:01 Expiry Notification July 21 20...  

7d8b845525ad8e4f8450065bb2a606f7


DGA Escalate priviledges KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM MSOffice File Email Client Info Stealer MachineGuid Checks debugger RWX flags setting unpack itself installed browsers check Windows Browser Email Cryptographic key 		1 4.8 guest

10299 2021-07-22 04:01 Capture.PNG  

83425938267eae3b1052b32ff82b03c8


DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM PNG Format MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		2 4.2 guest

10300 2021-07-22 04:01 vitafoods.com Update.htm  

20b9f99a81f6edbda4253942ad50ba17


BitCoin Admin Tool (Sysinternals etc ...) DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM MSOffic Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		5 4 2 5.2 1 guest

10301 2021-07-22 04:02 vitafoods.com Update.htm  

20b9f99a81f6edbda4253942ad50ba17


Admin Tool (Sysinternals etc ...) AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		5 4 1 4.6 1 guest

10302 2021-07-22 04:25 http://www.minutoverde.cl  

840006cb22684bf9760add2877ce940d


DGA DNS Socket Sniff Audio KeyLogger HTTP Internet API ScreenShot Http API Downloader persistence Create Service Escalate priviledges Code injection Hijack Network FTP Steal credential P2P AntiDebug AntiVM PNG Format JPEG Format MSOffice File Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		32 6 2 4.6 guest

10303 2021-07-22 04:42 http://www.enjoy.cl  

b1ec6d63aa3afbbeb1c9a17ab586b855


Generic Malware DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential Downloader P2P persistence AntiDebug AntiVM MSOffice File Code Injection Creates executable files ICMP traffic exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed 		11 6 2 5.6 guest

10304 2021-07-22 08:39 stin.exe  

31e8c459191e48965eba2e6e50f9f70c


Antivirus Malicious Library PE32 OS Processor Check PE File VirusTotal Malware sandbox evasion Browser 		2 3.6 57 ZeroCERT

10305 2021-07-22 08:39 skin.exe  

0dd3173feb2aad3ff8ea4ec119a88640


AntiDebug AntiVM PE32 PE File Malware download VirusTotal Malware AutoRuns Code Injection Malicious Traffic Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check Windows Botnet 		2 2 1 9.8 59 ZeroCERT

keyword