popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
12811 2021-09-25 17:06 chart-1352070144.xls  

9531c29f3fa2b245c4e107a528ad3da5


MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 4 3.6 guest

12812 2021-09-25 17:08 file8.exe  

3146709a424c7546aa78d89159618da8


Malicious Packer Malicious Library PE File PE32 VirusTotal Malware ICMP traffic unpack itself Tofsee DNS crashed 		2 3 2.4 M 31 r0d

12813 2021-09-25 17:09 chart-1351856767.xls  

e20d23985ac0123cbe9085ae1bd8f401


MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 5 4 3.6 guest

12814 2021-09-25 17:20 Original-BL Copy.exe  

a8db095259794e9185b05c111cfad9a1


Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName 		8.8 22 ZeroCERT

12815 2021-09-25 17:21 липень.docx  

6d956049dbaadc19543a565d303e26a5


Word 2007 file format(docx) VirusTotal Malware MachineGuid Check memory RWX flags setting unpack itself suspicious TLD GameoverP2P Zeus ComputerName Trojan Banking 		2 6.2 21 ZeroCERT

12816 2021-09-25 17:22 RFQQ.ppt  

a3b289f75249284dc08633c2d766c682


VBA_macro Generic Malware MSOffice File VirusTotal Malware 		1 1 0.6 18 ZeroCERT

12817 2021-09-25 17:23 Nakul Kumar.doc  

7c6ff96ddaf3bf3bf824ba6e625a9d21


VBA_macro Generic Malware MSOffice File VirusTotal Malware heapspray RWX flags setting unpack itself 		2 4.0 22 ZeroCERT

12818 2021-09-25 17:33 calib123123.html  

a77b068a60e6c4c11005bb676043d3a0


Antivirus AntiDebug AntiVM MSOffice File PNG Format Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		32 15 1 4.2 ZeroCERT

12819 2021-09-25 17:36 dd.exe  

745e57d1e9ef58647a60e3d341589d0f


RAT Generic Malware Antivirus Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File PE32 PE64 VirusTotal Malware powershell AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8.0 M 37 ZeroCERT

12820 2021-09-26 09:02 03e509b6063c398b29d279772b5da6...  

7cdd71abb518c66b689a1941c4fea102


VBA_macro Generic Malware Antivirus MSOffice File powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		1 4.8 ZeroCERT

12821 2021-09-26 09:05 ConsoleApp19.exe  

41d54244280dd5a221565c203f459f5d


AgentTesla NPKI browser info stealer Generic Malware Google Chrome User Data Antivirus Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection Downloader AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS crashed keylogger 		2 1 13.2 36 ZeroCERT

12822 2021-09-26 09:08 Love lettre.vbs  

8d7e6344c4df391b4c3899b5063f53b9

ComputerName 		0.2 ZeroCERT

12823 2021-09-27 08:03 1337.exe  

b1f7f880924a93222a01cf3bc0a9ed83


PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.2 20 ZeroCERT

12824 2021-09-27 08:03 13123.exe  

8da26029b1c8475f9ff8ecc59efc6d07


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed 		1 3 1 7.2 35 ZeroCERT

12825 2021-09-27 08:06 build1.exe  

3b0601423f1fb5ca121b524c6273f7d1


RAT PWS .NET framework Generic Malware PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		1 3 1 8.0 43 ZeroCERT

keyword