popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14131 2021-10-27 18:10 ebj1i5m.jpg  

4fb7a13f579d6c44324206a7c1818f4c


Malicious Library UPX PE File OS Processor Check PE32 DLL PDB unpack itself crashed 		0.8 ZeroCERT

14132 2021-10-27 18:10 sqlservr.exe  

b60e5e6ba330fe48dc60036585244dd6


PWS Loki[b] Loki.m .NET framework Generic Malware Socket DNS AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName DNS Software crashed 		1 1 6 1 14.2 M 13 ZeroCERT

14133 2021-10-27 18:11 1.html  

80a23da8fd4e2533fdd4d0ec0952d0a2


Antivirus AntiDebug AntiVM MSOffice File PNG Format Code Injection Creates executable files RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		21 16 2 4.2 ZeroCERT

14134 2021-10-27 18:12 v2worottu.zip  

179547d6f870b7ecf096bc3fd7481c59


Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB unpack itself crashed 		1.6 6 ZeroCERT

14135 2021-10-27 18:39 Recover-your-messages-immediea...  

0319309723ce48319ed9fd8a13fea03d


AntiDebug AntiVM MSOffice File Code Injection RWX flags setting exploit crash unpack itself Windows utilities Tofsee Windows Exploit DNS crashed 		2 3.8 guest

14136 2021-10-27 21:58 goal.exe  

58ee2cdf0199c4e0ff5c2fd1dba4d01a


RAT PWS .NET framework [m] Generic Malware Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		10.4 36 ZeroCERT

14137 2021-10-27 22:00 pub3.exe  

9d9e728b344d741f97483e7628d7bedc


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.0 25 ZeroCERT

14138 2021-10-27 22:02 syurouexcel.xlsx  

7a7164733e1a94437a5f7e88e10f8d62

unpack itself 		1.2 ZeroCERT

14139 2021-10-27 22:07 DownFlSetup999.exe  

fbe63f23b748aa26ebb75e73edc84520


RAT PWS .NET framework Generic Malware UPX PE File PE32 .NET EXE OS Processor Check Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Collect installed applications Check virtual network interfaces AppData folder installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed 		11 11 1 8 11.4 M 19 ZeroCERT

14140 2021-10-27 22:12 protocol-67578875.xls  

5e7a750fba321c306f9820c5f422529e


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 2 3.6 guest

14141 2021-10-27 22:14 protocol-681080435.xls  

ffae16ac46573765379065dcae2ec248


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 2 3.6 guest

14142 2021-10-27 22:16 1.xls  

b1de71a7369b8398d18708df20890588

VirusTotal Malware Check memory RWX flags setting unpack itself suspicious process Tofsee Interception 		1 2 1 4.2 25 guest

14143 2021-10-28 09:29 1.xls  

b1de71a7369b8398d18708df20890588

VirusTotal Malware Check memory unpack itself suspicious process Tofsee Interception 		2 1 4.4 25 guest

14144 2021-10-28 09:34 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File RWX flags setting unpack itself 		2.0 guest

14145 2021-10-28 09:35 1.xls  

b1de71a7369b8398d18708df20890588

VirusTotal Malware Check memory unpack itself suspicious process Tofsee Interception 		2 1 4.4 25 guest

keyword