Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
12361	2023-06-11 22:49	cleanmgr.exe 08882f8548e7fdd0a66fb9a6060bf31c UPX Malicious Library PE File PE32 JPEG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder				3.0	M	34	ZeroCERT

12362	2023-06-11 22:47	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12363	2023-06-11 22:46	theme1.xml 7c846c1a3ca16765bede316a0b88981f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12364	2023-06-11 22:44	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

12365	2023-06-11 22:44	ogumbgejapxd.exe ae1b1b996deff4c26bed7f12725c3c62 Generic Malware UPX Malicious Library Malicious Packer OS Processor Check PE64 PE File VirusTotal Malware crashed				1.4	M	42	ZeroCERT

12366	2023-06-11 22:44	theme1.xml 7c846c1a3ca16765bede316a0b88981f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12367	2023-06-11 22:42	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

12368	2023-06-11 22:42	theme1.xml 7c846c1a3ca16765bede316a0b88981f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed		1	2	3.8			guest

12369	2023-06-11 22:41	theme1.xml 7c846c1a3ca16765bede316a0b88981f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12370	2023-06-11 22:39	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

12371	2023-06-11 22:38	datelog.dll c66b0840fb234a69216f2a8762c0d6cc Backdoor Farfli UPX Malicious Library Malicious Packer Antivirus OS Processor Check DLL PE File PE32 VirusTotal Malware Check memory Checks debugger unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS		2		3.8	M	57	ZeroCERT

12372	2023-06-11 22:38	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12373	2023-06-11 22:36	ilililililillililiillilililili... 282f3b518b202b031c75151ab99761a7 MS_RTF_Obfuscation_Objects RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed	2 Keyword trend analysis	2	13 Info ET MALWARE LokiBot User-Agent (Charon/Inferno) ET MALWARE LokiBot Checkin ET INFO Executable Download from dotted-quad Host ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1 ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2 ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 ET INFO Packed Executable Download ET MALWARE LokiBot Request for C2 Commands Detected M1 ET MALWARE LokiBot Request for C2 Commands Detected M2 ET MALWARE LokiBot Fake 404 Response ET POLICY PE EXE or DLL Windows file download HTTP ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response	5.0	M	35	ZeroCERT

12374	2023-06-11 22:36	theme1.xml 7c846c1a3ca16765bede316a0b88981f AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed				3.8			guest

12375	2023-06-11 22:36	[Content_Types].xml 7084b736cec7aca9dcd6448907d35fb2 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest