popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1096 2020-07-28 17:34 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1097 2020-07-28 17:37 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1098 2020-07-28 17:37 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1099 2020-07-28 17:40 python-2.7.18.amd64.msi  

a425c758d38f8e28b56f4724b499239a


VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VM Disk Size Check ComputerName DNS 		2 1 5.4 1

1100 2020-07-28 17:41 python-2.7.18.amd64.msi  

a425c758d38f8e28b56f4724b499239a


VirusTotal Malware Buffer PE suspicious privilege Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs AntiVM_Disk VM Disk Size Check ComputerName DNS 		2 1 5.4 1

1101 2020-07-28 17:43 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		2 1 4.2

1102 2020-07-28 17:45 https://download.nullsoft.com/...  

3017f921a6c42a267842cc8bae9384c1


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit crashed 		3 5 3.6

1103 2020-07-28 17:49 report_정보.docx  

f41061dd8076733439cbb94b6750564f


unpack itself 		1.2

1104 2020-07-28 17:53 cuda_10.0.130_win10_network.ex...  

3312deac9c939bd78d0e7555606c22fc


VirusTotal Malware suspicious privilege Check memory Checks debugger WMI Creates executable files unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser ComputerName 		3.6 1

1105 2020-07-28 17:59 excel.xlsx  

d95ae922fa3e71e6b5a37d418643f791


unpack itself malicious URLs 		2.0

1106 2020-07-28 18:31 swiftcopy.exe  

32cabf46ceff775a3523dfda9ade8fb7


Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW installed browsers check Windows Browser ComputerName DNS Software 		1 1 15.2 M 16

1107 2020-07-28 18:35 thai.exe  

ba70b6d1831a3a890d87566e6c206e79


VirusTotal Malware 		1.6 M 50

1108 2020-07-28 18:37 buk.exe  

4e800ddccb8002e89434d1efc1e86958


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Check memory Checks debugger unpack itself malicious URLs Windows Browser Email ComputerName Cryptographic key Software crashed 		6.6 M 45

1109 2020-07-29 08:50 bF7hIR6ROuc.exe  

cca93aa31231f3c2150e1a3adf93354e


Malware Malicious Traffic unpack itself sandbox evasion Windows Browser Advertising ComputerName DNS Cryptographic key 		5 8 6.4 M

1110 2020-07-29 08:52 DOC_PO_07292020EX.doc  

51e3a656cf223b77ebcf7833ac887a90


Vulnerability VirusTotal Malware Malicious Traffic unpack itself DNS 		4 4 4.4 24

keyword