Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2021-08-23 12:15	fbtc-client.exe 7a9a32c45303b7bef1651551799bb68f Lazarus Family Gen2 RAT BitCoin Generic Malware Themida Packer WebCam UPX Malicious Library DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Hijack Network Internet API FTP ScreenShot Http API Steal credential D Browser Info Stealer Malware download NetWireRC VirusTotal Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion VMware anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Firmware DNS Cryptographic key crashed Downloader	7 Keyword trend analysis Info http://bingoroll6.net/new.exe http://bingoroll6.net/bld.exe http://bingoroll15.net/update.php?id=315021678&stat=91e2f106dc042be7fe29ceda1c1236d8&cmd=1 http://45.138.72.167:25882/ http://bingoroll6.net/me.exe http://bingoroll15.net/update.php?id=315021678&stat=91e2f106dc042be7fe29ceda1c1236d8 https://api.ip.sb/geoip	12	7 Info ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile ET INFO Packed Executable Download ET POLICY PE EXE or DLL Windows file download HTTP SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET POLICY TeamViewer Keep-alive inbound ET MALWARE Win32.Spy/TVRat Checkin SURICATA HTTP unable to match response to request		19.6	M	30	ZeroCERT

First
1
Last
Total : 1cnts