popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14146 2021-10-28 09:38 1.xls  

b1de71a7369b8398d18708df20890588


VirusTotal Malware Check memory unpack itself suspicious process Tofsee Interception 		2 1 4.4 25 guest

14147 2021-10-28 09:57 1.xls  

b1de71a7369b8398d18708df20890588


VirusTotal Malware Check memory unpack itself suspicious process Interception 		1 3.8 25 guest

14148 2021-10-28 10:13 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File RWX flags setting unpack itself 		2.0 guest

14149 2021-10-28 10:15 1027_6830345414.doc  

3f4f3c6d33b34fa28fca54d9accad2d1


VBA_macro Generic Malware MSOffice File RWX flags setting unpack itself 		2.0 guest

14150 2021-10-28 10:21 protocol-1581603754.xls  

e7d9cf47cf81353bf431ff5dab10a747


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 2 3.6 guest

14151 2021-10-28 10:23 protocol-1581218734.xls  

2644388eeb78aad6173cd72d3d3efb78


Downloader MSOffice File RWX flags setting unpack itself suspicious process Tofsee 		3 6 2 3.6 guest

14152 2021-10-28 10:24 0001.xll  

be014ff519969d32929b19cd3be0c0d1


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB Remote Code Execution 		2.0 38 ZeroCERT

14153 2021-10-28 10:24 user4.tx.ps1  

af2bec1985c781dc79389c9d63b6d8c5


Generic Malware Antivirus VirusTotal Malware Check memory unpack itself Check virtual network interfaces WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		1 1 2.6 12 ZeroCERT

14154 2021-10-28 10:30 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File unpack itself 		1.6 ZeroCERT

14155 2021-10-28 10:56 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File Vulnerability unpack itself 		2.2 guest

14156 2021-10-28 11:00 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File Vulnerability unpack itself 		2.2 guest

14157 2021-10-28 11:02 1027_4830311122.doc  

24e1900dfa4cdf71e11dd3f60874d87f


VBA_macro Generic Malware MSOffice File Vulnerability unpack itself 		2.2 guest

14158 2021-10-28 11:07 rundll32.exe  

72e7be10798c5a7c59972edb0a24f1d6


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		7 12 2 3 7.8 M 11 ZeroCERT

14159 2021-10-28 11:08 vbc.exe  

947b72694e25a2fefcfadd3aeec7c0a1


NSIS Generic Malware Malicious Library UPX PE File PE32 DLL Emotet VirusTotal Malware Code Injection Check memory Creates executable files unpack itself AppData folder 		4.2 27 ZeroCERT

14160 2021-10-28 11:09 .lsass.exe  

e87b10b098df8ff5906cb1154c78e83d


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization Windows ComputerName Cryptographic key Software 		2 4 1 15.0 32 ZeroCERT

keyword