No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2021-10-21 08:07 |
WIRE TRANSFER.exe 3d6ede6db43836cf8a5304f7e9f3a1cdGeneric Malware Admin Tool (Sysinternals etc ...) UPX DNS AntiDebug AntiVM PE File PE32 .NET EXE Malware download Nanocore Malware c&c Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW human activity check Windows ComputerName DNS DDNS |
2 | 2 | 14.8 | ZeroCERT | ||||||||||||||||||
|