popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1261 2020-07-31 15:31 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 6.4 14

1262 2020-07-31 15:47 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities malicious URLs Windows DNS 		6 2 3.6

1263 2020-07-31 15:48 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 5.0 14

1264 2020-07-31 15:58 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1265 2020-07-31 16:00 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Windows DNS 		6 2 3.6

1266 2020-07-31 16:02 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 5.8 14

1267 2020-07-31 16:09 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1268 2020-07-31 16:11 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files unpack itself Windows utilities Windows DNS 		6 2 3.2

1269 2020-07-31 16:12 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 6.4 14

1270 2020-07-31 16:19 http://www.nalara1220.o-r.kr  

c032bb944d6fba21799bd5a4df5b6122


Code Injection Creates executable files RWX flags setting unpack itself Windows utilities Windows DNS 		6 2 3.6

1271 2020-07-31 16:20 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 5.8 14

1272 2020-07-31 16:27 2xp2t9649.exe  

dedaa6e9be869d05d710493436323d42


VirusTotal Malware Malicious Traffic unpack itself malicious URLs sandbox evasion Windows Advertising ComputerName DNS Cryptographic key 		1 1 6.4 14

1273 2020-07-31 16:28 python-2.7.18.amd64.msi  

a425c758d38f8e28b56f4724b499239a


VirusTotal Malware suspicious privilege Check memory Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Ransomware Browser ComputerName 		3.4 1

1274 2020-07-31 16:39 aG7u8kaVGsbct6d.exe  

4c47449732d4a12867f22d318c049591


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs ComputerName crashed 		9.4 M 41

1275 2020-07-31 16:42 silverlight5.exe  

4f7317ce40e4c8d911746cc79a4c6228


Emotet VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Disables Windows Security AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW Creates autorun.inf VM Disk Size Check human activity check installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		6 4 16.2 61

keyword