popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-10-14 16:54 Ord20211310570045368964AL.exe  

0cb1c28aaae7fb100c41281e5c9b6c2b


RAT PWS .NET framework Generic Malware task schedule Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key DDNS 		2 1 12.4 10 ZeroCERT

2 2021-10-14 16:53 Ord20211310570045368963AC.exe  

f6fde8532e45bb49f3220e64c10d11a1


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted ICMP traffic unpack itself 		5 13 2 8.6 10 ZeroCERT

  • First
  • 1
  • Last
  • Total : 2cnts
keyword