Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
12946	2023-05-24 17:04	kkkb_.mp3 3076bcf185cf6618a87eedda1c2f21d3 Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	4.8			guest

12947	2023-05-24 17:03	kkdbkk.mp3 07d2cfe589e9b68b5aaf816f919928eb AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12948	2023-05-24 17:03	kkdb.mp3 8121769ad62b4889da80aaa370ec9456 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12949	2023-05-24 17:01	kkkb.mp3 5e2ef66c23848fb2e58039688525e777 Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed		1	2	4.2			guest

12950	2023-05-24 17:01	Berninesque.js afd901a05b3501b938b9e78d48e1f5e3 Generic Malware Antivirus Hide_URL AntiDebug AntiVM PowerShell powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut unpack itself suspicious process Windows ComputerName Cryptographic key	1 Keyword trend analysis			5.6			ZeroCERT

12951	2023-05-24 17:00	kkdaesinsave.mp3 555616843783969c5ea4e37c1295d8f1 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12952	2023-05-24 16:59	SISISIISISI%23%23%23%23%23%23%... bc7ed676fe3515f3585501bd2169b930 MS_RTF_Obfuscation_Objects RTF File doc Malware download Remcos VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS DDNS crashed	3 Keyword trend analysis	5	9 Info ET INFO DYNAMIC_DNS Query to a .duckdns .org Domain ET INFO DYNAMIC_DNS Query to .duckdns. Domain ET MALWARE Generic .bin download from Dotted Quad ET INFO Executable Download from dotted-quad Host ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M1 ET POLICY PE EXE or DLL Windows file download HTTP ET MALWARE Likely Evil EXE download from dotted Quad by MSXMLHTTP M2 ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response ET JA3 Hash - Remcos 3.x TLS Connection	6.2	M	28	ZeroCERT

12953	2023-05-24 16:58	kkchinesave.mp3 289483c70f389584ceb716db84cb1117 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	4.8			guest

12954	2023-05-24 16:58	kkjtsave.mp3 45c2cc5656ccc7fa1bbf6373d8ca97c6 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12955	2023-05-24 16:56	kkjtcap.mp3 782861bd58ee908c64ea16580ee94ab9 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12956	2023-05-24 16:56	kkbnk.mp3 479f90486cabab0802897ef87dbd80d9 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	4.8			guest

12957	2023-05-24 16:56	kkbaroron.mp3 f57490d42a938ac2ee4ee6aa9dc09402 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12958	2023-05-24 16:55	kkjoycredit.mp3 aeabd041ab694e0acd24b634f14a3c85 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest

12959	2023-05-24 16:54	kkibkkk.mp3 970953b78d4b27b1e4432bb8cfa4175e Downloader Create Service DGA Socket DNS Hijack Network Code injection HTTP PWS[m] Sniff Audio Steal credential Http API P2P Internet API Escalate priviledges persistence FTP KeyLogger ScreenShot AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities malicious URLs Tofsee Windows Exploit DNS crashed			2	5.8			guest

12960	2023-05-24 16:54	kkazu.mp3 12b61a668cc4418df03293b8bb681cf7 AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed			2	3.8			guest