popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
14431 2021-11-02 12:25 invoice_000899889.wbk  

d96431380975c0c711acd8795b99fd76


RTF File doc Malware download VirusTotal Malware Malicious Traffic buffers extracted exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 1 6 4.6 31 ZeroCERT

14432 2021-11-02 12:28 Yandex1500.exe  

38c0f733e983c0e12a6ab7ba2b1415ed


Generic Malware UPX Malicious Library PE64 PE File OS Processor Check PE32 VirusTotal Malware MachineGuid Check memory Checks debugger Creates executable files ICMP traffic unpack itself AppData folder Tofsee DNS crashed 		2 3 5.0 33 ZeroCERT

14433 2021-11-02 12:31 winlogon.exe  

fd06b68ee03940e334f35b12e36ac718


NSIS Malicious Library UPX PE File PE32 OS Processor Check DLL FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		12 24 2 5.8 24 ZeroCERT

14434 2021-11-02 14:39 1.xlsb  

dee6841dad2810dbb7d487803e3f2b4c


Excel Binary Workbook file format(xlsb) VirusTotal Malware RWX flags setting unpack itself 		1.8 18 guest

14435 2021-11-02 14:39 Over Charges.xll  

b80ab428dca46779c14807ea7422452f


Generic Malware Malicious Library UPX PE64 PE File OS Processor Check DLL PDB Remote Code Execution 		1.0 guest

14436 2021-11-02 14:39 Unpaid month.xll  

aa0bd807de12aa711ec1b6fb34212a10


Generic Malware Malicious Library UPX PE File OS Processor Check PE32 DLL VirusTotal Malware PDB Remote Code Execution 		1.6 11 guest

14437 2021-11-02 14:44 NEW DOCUMENTS_SCAN_IMAGE_JPEG_...  

55bdb7f0041df344074f8176d9412be2


Generic Malware PE File PE32 .NET EXE VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 24 guest

14438 2021-11-02 14:44 NEW ORDER EXPORT0021IMG9736403...  

43b431fc0de6f60a36fb846f3d90a0b0


Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		3 1 14.8 34 guest

14439 2021-11-02 14:46 REVISED CONTRACT.exe  

7b4520d03a7be5596c800642f3bd3132


Generic Malware Antivirus DNS AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS 		4 1 15.8 35 guest

14440 2021-11-02 16:19 1.xlsb  

dee6841dad2810dbb7d487803e3f2b4c


Excel Binary Workbook file format(xlsb) VirusTotal Malware Check memory unpack itself suspicious process 		3.0 18 ZeroCERT

14441 2021-11-02 17:41 ConsoleApp82.exe  

d475a16d7396c7883d5ba4f865a0fc96


Generic Malware task schedule AntiDebug AntiVM PE File PE32 .NET EXE Dridex TrickBot VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Kovter Windows DNS Cryptographic key crashed 		1 1 9.8 45 ZeroCERT

14442 2021-11-02 17:43 ziyu.exe  

dc6c8fb72b02cf9237d1e53ae5f67d33


PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself 		11 24 2 7.8 12 ZeroCERT

14443 2021-11-02 17:44 Ref5412_Q_0120351252_ISO_03515...  

67f245dff6917f0f2a26fd38b908e996


RAT NPKI Generic Malware SMTP KeyLogger AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 14.0 19 ZeroCERT

14444 2021-11-02 17:45 ziy.hta  

5c88bf7225ed953a328bf598abfd9ce6

VirusTotal Malware unpack itself crashed 		1.0 1 ZeroCERT

14445 2021-11-02 17:45 game.exe  

adb8eadfafe1aa375ad6ec8328a5bc8d


Malicious Library UPX PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Remote Code Execution 		2.4 30 ZeroCERT

keyword