popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
13561 2021-10-14 15:58 j99zauz.jpg  

fddd5965364792568919cdf03a75f6e0


Gen2 Gen1 Malicious Library PE File PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.2 M 6 ZeroCERT

13562 2021-10-14 16:00 wv9tasf7.jpg  

06d34db8e51b48f3ab3b2e56a44d4f74


Gen2 Gen1 Malicious Library PE File PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.2 M 8 ZeroCERT

13563 2021-10-14 16:12 art-717340505.xls  

264088059456facc8baadf2a2ba6593a


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		4 8 4 4.8 guest

13564 2021-10-14 16:13 Payment_Receipt 2422.xls  

e63deaea51f7cc2064ff808e11e1ad55


VBA_macro Generic Malware KeyLogger ScreenShot AntiDebug AntiVM MSOffice File VirusTotal Malware Code Injection unpack itself 		2.4 9 ZeroCERT

13565 2021-10-14 16:14 art-71766134.xls  

4651c9768697acf3a15a80f61c8ae749


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		4 8 4 4.0 guest

13566 2021-10-14 16:16 art-718184786.xls  

a9e51062b4512cfb98065c71ce7b2605


Downloader MSOffice File ICMP traffic RWX flags setting unpack itself suspicious process Tofsee 		4 8 4 4.8 guest

13567 2021-10-14 16:45 Documents.lnk  

db8f42a798dd65d9bd8398c3e2564f06


Generic Malware AntiDebug AntiVM GIF Format VirusTotal Malware Code Injection Creates shortcut unpack itself crashed 		2.4 8 ZeroCERT

13568 2021-10-14 16:45 Advice from Standard Chartered...  

57b0ad14b76c30bdaef9b5c06028a746


RAT PWS .NET framework Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE Malware download Nanocore VirusTotal Malware c&c powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS crashed 		3 2 14.2 20 ZeroCERT

13569 2021-10-14 16:47 1.dll  

a3dfaa6badd480c93af825510e7cd1d2


UPX Malicious Library PE64 PE File OS Processor Check DLL VirusTotal Malware Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check crashed 		2.6 8 ZeroCERT

13570 2021-10-14 16:47 EXPORT DOCUMENTS_CMR_INVOICE_I...  

0a3212c04eeaed201c4038ab6dd3631b


Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 14.2 ZeroCERT

13571 2021-10-14 16:50 KRSEL0000056286.JPG.scr  

d6f040b4d7d217b8525dff843feba635


Gen2 Gen1 Generic Malware UPX Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName Remote Code Execution crashed 		13.2 43 ZeroCERT

13572 2021-10-14 16:50 IMG.00000201419.PNG.scr  

664d73b23eddfcd0227786b9d0f5d022


Gen2 Gen1 Generic Malware UPX Malicious Library DNS AntiDebug AntiVM PE File PE32 OS Processor Check VirusTotal Malware Buffer PE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName Remote Code Execution DNS DDNS crashed 		3 1 16.0 29 ZeroCERT

13573 2021-10-14 16:52 New Order.exe  

76ce20e50cfef6b8e5397b581105ba95


PWS .NET framework Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Malware download Nanocore Malware c&c powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 2 14.8 ZeroCERT

13574 2021-10-14 16:53 Ord20211310570045368963AC.exe  

f6fde8532e45bb49f3220e64c10d11a1


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		5 13 2 8.6 10 ZeroCERT

13575 2021-10-14 16:54 Ord20211310570045368964AL.exe  

0cb1c28aaae7fb100c41281e5c9b6c2b


RAT PWS .NET framework Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.4 10 ZeroCERT

keyword