popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
11956 2021-09-01 10:04 yui7653_pdf.exe  

734a89ad96b20660a5cc97dad178fdbc


AutoIt UPX PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself Tofsee DNS 		1 3 2 3.2 30 ZeroCERT

11957 2021-09-01 13:50 Scan HP Jet 371302-83.7z  

2c5b2473879d30de86142c75a96ce789


AntiDebug AntiVM VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName 		4.4 16 JYC

11958 2021-09-01 14:06 Scan HP Jet 371302-83.exe  

d703b3cc46820009bb6c4ab14666ea9e


RAT PWS .NET framework Generic Malware DNS AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces human activity check Tofsee Windows DNS Cryptographic key DDNS crashed 		1 4 2 14.6 25 JYC

11959 2021-09-01 14:14 0831_4435052411.doc  

004b4634de3991a6de6a2c756a83e6ff


Generic Malware VBA_macro MSOffice File unpack itself 		1.6 guest

11960 2021-09-01 14:15 0831_4532643085.doc  

f25c56cf3b503d96df86b4bb2c39f479


Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 7.4 M guest

11961 2021-09-01 14:18 0831_8300668682.doc  

25d3ac93606e135f18e4e96887fa3a44


hancitor Generic Malware VBA_macro MSOffice File GIF Format Malware Malicious Traffic Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Check virtual network interfaces IP Check ComputerName 		2 4 1 1 7.4 M guest

11962 2021-09-01 17:55 swflash.cab  

b3e138191eeca0adcc05cb90bb4c76ff

 Kim.GS

11963 2021-09-02 07:37 PAYLOAD2.PS1  

71af182d724fe991f4f3b4026fb7be66


Generic Malware Antivirus unpack itself 		0.4 ZeroCERT

11964 2021-09-02 07:52 tud.exe  

ce5d381161004cbbd80eaf1f37089cb2


Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 Emotet VirusTotal Malware AutoRuns Code Injection buffers extracted Creates executable files RWX flags setting unpack itself Windows utilities suspicious process WriteConsoleW Tofsee Windows ComputerName 		3 4 1 9.6 24 ZeroCERT

11965 2021-09-02 07:54 invoice.wbk  

dd2f7b986cc840b4c4f9b03def8fcadd


RTF File doc AntiDebug AntiVM Malware download Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Tofsee Windows Exploit DNS Cryptographic key crashed Downloader 		1 3 8 4.4 ZeroCERT

11966 2021-09-02 08:02 vbc.exe  

1cd98a8f7c1680578f5a0f097ca218da


Malicious Library PE File OS Processor Check PE32 unpack itself Tofsee 		1 2 2 0.6 M ZeroCERT

11967 2021-09-02 08:24 vbc.exe  

1cd98a8f7c1680578f5a0f097ca218da


Malicious Library PE File OS Processor Check PE32 unpack itself Tofsee 		1 2 2 0.6 M guest

11968 2021-09-02 09:17 bytes.dll  

0c6fec239a33864acdd558de506c1c3a


Generic Malware Malicious Packer PE File .NET DLL DLL PE32 VirusTotal Malware 		1.2 16 ZeroCERT

11969 2021-09-02 09:19 ..-.-...................------...  

98a92918a128f1f26d552bb3aaab2a61


RTF File doc AntiDebug AntiVM FormBook Malware download VirusTotal Malware MachineGuid Malicious Traffic Check memory Checks debugger exploit crash unpack itself Windows Exploit DNS crashed Downloader 		19 16 8 6 5.4 M 26 ZeroCERT

11970 2021-09-02 09:19 templefirstzx.exe  

6c0795e7a1460e3eb294d63e6961bd1c


RAT PWS .NET framework Formbook Generic Malware SSL DNS Socket SMTP Escalate priviledges KeyLogger Internet API ScreenShot Dynamic Dns persistence AntiDebug AntiVM PE File .NET EXE PE32 JPEG Format DLL FormBook Malware download VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself AppData folder malicious URLs Tofsee Windows Advertising Google ComputerName DNS Cryptographic key DDNS crashed keylogger 		11 26 6 2 15.4 M 23 ZeroCERT

keyword