Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2021-08-04 09:48	New_002728770031.exe 644f29b49816a65b5c827a7f1955aa39 RAT Generic Malware UPX SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed	2 Keyword trend analysis	4	3		13.8	M	36	ZeroCERT

2	2021-08-04 09:42	ConsoleApp14.exe fb5b5b8edf450c3cb9c5c88547874048 PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed	2 Keyword trend analysis	7	3		18.8	M	42	ZeroCERT

3	2021-08-04 09:42	Excel_71_804_23122.exe 9c7ea0cadbcba4d2d9777731339fab43 PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW VMware IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed keylogger	2 Keyword trend analysis	6	3		17.4	M	23	ZeroCERT

4	2021-08-04 09:39	New_0027200031.exe 8cbbf3dabe926f1dda7c89ca477206fd PWS .NET framework Generic Malware UPX Antivirus SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed	2 Keyword trend analysis	6	3		17.4	M	37	ZeroCERT

5	2021-08-04 09:36	New_1007572_021.exe 41137fd61b9cc0d92225c91660a5902c RAT Generic Malware UPX AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder crashed	3 Keyword trend analysis Info http://www.xinyisanreqi.com/cg53/?T8SD=IH6xuV53t1O8cgYhT4tQpi3TxtA7wfqS8uDOT7Zi29wexx3ZCGtTBXSi+TOfwYL1x8voHF35&NVlTnb=o2JhQT4HxtyDuVtP http://www.lvyi19.com/cg53/?T8SD=WiiXXgOAleA7Y5gv4djo0cAbbquqgea++YKCzxIGHZZ1xQP78WGQ3riSOchSPht9pZSIkzZ4&NVlTnb=o2JhQT4HxtyDuVtP http://www.healinghandssalem.com/cg53/?T8SD=i57Q5A28ObJQOLfsNs28RhAlfyvzZM0CQcr3ejFPyqD98hX6/Q6nrSa1A8B/q2hu3ufg8b08&NVlTnb=o2JhQT4HxtyDuVtP	7	1		9.4	M	22	ZeroCERT

First
1
Last
Total : 5cnts