Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2025-04-04 09:53	rh.exe a562a58fcd80a509c9c28dca1b7b6fa6 Code injection AntiDebug AntiVM PE File .NET EXE PE32 DLL .NET DLL Malware download NetWireRC VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder IP Check Windows RAT ComputerName Trojan DNS Cryptographic key Downloader	2 Keyword trend analysis	3	9 Info ET POLICY External IP Lookup ip-api.com ET MALWARE Sheet RAT CnC Checkin ET MALWARE Single char EXE direct download likely trojan (multiple families) ET INFO Executable Download from dotted-quad Host ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile ET POLICY PE EXE or DLL Windows file download HTTP ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download ET HUNTING SUSPICIOUS Dotted Quad Host MZ Response ET INFO External IP Lookup Domain in DNS Lookup (ip-api .com)		14.4		40	ZeroCERT

2	2024-09-17 13:49	XClient_protected.exe c27417453090d3cf9a3884b503d22c49 Malicious Library Malicious Packer Antivirus .NET framework(MSIL) UPX PE File .NET EXE PE32 OS Processor Check VirusTotal Malware Check memory Checks debugger unpack itself					2.4	M	63	ZeroCERT

3	2024-08-26 09:30	ven_protected.exe d0dd63b98bf3d7e52600b304cdf3c174 Generic Malware UPX Anti_VM PE File .NET EXE PE32 VirusTotal Malware DNS		1			3.6		28	ZeroCERT

4	2022-09-12 15:39	8c06e6fc9ac2823c_tmp1252549637... 6489ebd538516f3ec981a41459c7c225 RAT PWS .NET framework UPX Malicious Packer PE32 OS Processor Check PE File .NET EXE					0.4			ZeroCERT

First
1
Last
Total : 4cnts