Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	VT	Player
14836	2023-03-16 09:31	vbc.exe e5e52fbd154bc8f2ac5bc61252c52055 UPX Malicious Library Malicious Packer PE32 PE File Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself suspicious TLD installed browsers check Browser Email ComputerName DNS Software	1 Keyword trend analysis	2	9 Info ET DNS Query for .su TLD (Soviet Union) Often Malware Related ET MALWARE LokiBot User-Agent (Charon/Inferno) ET MALWARE LokiBot Checkin ET POLICY HTTP Request to .su TLD (Soviet Union) Often Malware Related ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M1 ET MALWARE LokiBot Application/Credential Data Exfiltration Detected M2 ET MALWARE LokiBot Request for C2 Commands Detected M1 ET MALWARE LokiBot Request for C2 Commands Detected M2 ET MALWARE LokiBot Fake 404 Response	8.2	33	ZeroCERT

14837	2023-03-16 09:31	extracted_at_0x1dfdf.rtf 19bed9026283b568e85f96cd98edaade MS_RTF_Obfuscation_Objects RWX flags setting				0.8		guest

14838	2023-03-16 09:29	extracted_at_0x1d56f.rtf 2df783337034d88d73b48539901c5bf4 MS_RTF_Obfuscation_Objects exploit crash Exploit crashed				1.0		guest

14839	2023-03-16 09:28	extracted_at_0x1d24e.rtf 88b390247ef91e19affd43a11c6d6387 MS_RTF_Obfuscation_Objects RWX flags setting				0.8		guest

14840	2023-03-16 09:28	extracted_at_0x1d15f.rtf f2f52987a8386d72d9ad7796aeeea31c MS_RTF_Obfuscation_Objects unpack itself				0.8		guest

14841	2023-03-16 09:26	extracted_at_0x1d4dc.rtf f55a50a7f1172ee6c8bb246f0b7c5d58 MS_RTF_Obfuscation_Objects exploit crash Exploit crashed				1.0		guest

14842	2023-03-16 09:26	extracted_at_0x1d3ad.rtf 09f98c652f59e9ccd00d91f500634c53 MS_RTF_Obfuscation_Objects RWX flags setting				0.8		guest

14843	2023-03-16 09:26	extracted_at_0x1d2c0.rtf 7c6cc026017bfdf940f25f084611b63c MS_RTF_Obfuscation_Objects unpack itself				0.8		guest

14844	2023-03-16 09:24	extracted_at_0x1d0ce.rtf 1e91c0e2616bba5aab72ef3813ba97a1 MS_RTF_Obfuscation_Objects VirusTotal Malware exploit crash Exploit crashed				1.4	2	guest

14845	2023-03-16 09:24	extracted_at_0x1c9ad.rtf 2b4b7544794d27dd00ce345d8958ebf4 MS_RTF_Obfuscation_Objects VirusTotal Malware RWX flags setting				1.2	2	guest

14846	2023-03-16 09:24	extracted_at_0x1c7bb.rtf be975b96947f0c9f0a09396755c37ee6 MS_RTF_Obfuscation_Objects Vulnerability VirusTotal Malware unpack itself				1.8	2	guest

14847	2023-03-16 09:22	extracted_at_0x1bd9e.rtf de4bd754d41b59072cf82fc79ecbd735 MS_RTF_Obfuscation_Objects exploit crash Exploit crashed				1.0		guest

14848	2023-03-16 09:22	extracted_at_0x1bf88.rtf 5b059181ad6f31e04769bd2009cb96b8 MS_RTF_Obfuscation_Objects VirusTotal Malware RWX flags setting				1.2	2	guest

14849	2023-03-16 09:22	extracted_at_0x0.rtf cd28b51516a9309b350607dc57faca76 Vulnerability buffers extracted unpack itself				2.2		guest

14850	2023-03-16 09:18	extracted_at_0x2036a.rtf 52dc0e0a67f2472079b7bfa45072b6f8 MS_RTF_Obfuscation_Objects unpack itself				0.8		guest