Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6402 | April 13, 2021, 9:03 a.m. | April 13, 2021, 9:10 a.m. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
description | Escalade priviledges | rule | escalate_priv | ||||||
description | Run a keylogger | rule | keylogger | ||||||
description | Affect system registries | rule | win_registry | ||||||
description | Affect system token | rule | win_token | ||||||
description | Affect private profile | rule | win_files_operation | ||||||
description | (no description) | rule | DebuggerCheck__GlobalFlags | ||||||
description | (no description) | rule | DebuggerCheck__QueryInfo | ||||||
description | (no description) | rule | DebuggerHiding__Thread | ||||||
description | (no description) | rule | DebuggerHiding__Active | ||||||
description | (no description) | rule | ThreadControl__Context | ||||||
description | (no description) | rule | SEH__vectored | ||||||
description | Checks if being debugged | rule | anti_dbg | ||||||
description | Bypass DEP | rule | disable_dep |
host | 172.217.25.14 |
NANO-Antivirus | Trojan.Reg.StartPage.dcnage |
Cyren | W32/GenBl.F0857D74!Olympus |
TrendMicro-HouseCall | Suspici.CF2FA188 |
Kaspersky | Trojan.WinREG.StartPage.dj |
AegisLab | Troj.Winreg.Startpage!c |
Ikarus | Trojan.WinREG.StartPage |
Jiangmin | Trojan/Reg.j |
ZoneAlarm | Trojan.WinREG.StartPage.dj |
GData | Script.Application.StartPage.V (2x) |
VBA32 | Trojan.WinREG.StartPage.dj |
Tencent | Unk.Win32.Script.400195 |
MAX | malware (ai score=87) |
Fortinet | Riskware/StartPage.DJ |
Qihoo-360 | Win32/Trojan.f4a |