popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1141 2020-07-29 23:38 invoice_25225.doc  

994c751f8ecc657be98920365929f4cf


Vulnerability VirusTotal Malware buffers extracted exploit crash unpack itself Exploit DNS crashed 		1 1 5.0 23

1142 2020-07-29 23:40 tpriv.ps1  

422390f87f4c83bb435dfeaa0db7bd9b


VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory buffers extracted WMI Creates executable files unpack itself Windows utilities Disables Windows Security Auto service powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization Ransomware Windows Tor ComputerName DNS Cryptographic key 		11 7 24.2 M 9

1143 2020-07-29 23:59 wop.exe  

301f883fe5145bad9b1e5044c691a7ba


Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware PDB suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs Windows Browser Email ComputerName Remote Code Execution DNS Cryptographic key Software crashed keylogger 		1 3 12.0 M 36

1144 2020-07-29 23:59 winlog.exe  

33d28d8be1d957a58d32a2100393d696


VirusTotal Malware Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder malicious URLs crashed 		4.0 M 22

1145 2020-07-30 00:11 Doc_20200729_OYO975.doc  

43e0305c2cc8aaf8b50bb2e2c24e6efa


Vulnerability VirusTotal Malware unpack itself 		2.4 M 17

1146 2020-07-30 00:15 harl.exe  

603a9d172499974f5dce0a3ce6365cd9


VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder malicious URLs crashed 		3.4 M 14

1147 2020-07-30 09:39 http://factorialk.pp.ua/wp-adm...  


Code Injection unpack itself Windows utilities Windows 		1 2 2.2

1148 2020-07-30 09:42 https://cdn1.estsecurity.com/s...  

de15c8aea224b9c0f6e81d5a0431b461


Code Injection Creates executable files exploit crash unpack itself Windows utilities AppData folder Windows Exploit DNS crashed 		1 1 4.2

1149 2020-07-30 09:47 http://www.viportal.co/shoock/...  

a156f22115cbe7dece3bbc5ad71389c9


VirusTotal Malware Code Injection unpack itself Windows utilities malicious URLs Windows DNS 		1 1 4.0

1150 2020-07-30 10:22 http://www.viportal.co/shoock/...  

f2f4df4d498ec04a644a72490978a355


Vulnerability VirusTotal Malware MachineGuid Code Injection Check memory Checks debugger exploit crash unpack itself Windows utilities malicious URLs Windows Exploit crashed 		2 5 7.6

1151 2020-07-30 11:03 http://www.nalara1220.o-r.kr/  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1152 2020-07-30 11:15 INVOICE 2716-300397.doc  

bcc2fc9203b0b000565ce197db22a503


Vulnerability VirusTotal Malware unpack itself 		2.6 28

1153 2020-07-30 11:15 BAL_SL7895839983PH.doc  

d485d3df948c1ca2ac7ae5e9916cd704


Vulnerability VirusTotal Malware unpack itself 		2.6 28

1154 2020-07-30 11:32 http://www.nalara1220.o-r.kr/m...  

543d9bb195c2df50e3dc076b6fdf95ef


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Windows 		5 4 3.0

1155 2020-07-30 11:34 http://www.nalara1220.o-r.kr/m...  

543d9bb195c2df50e3dc076b6fdf95ef


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		5 2 3.2

keyword