No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2023-10-11 18:11 |
Ooseha.exe cb75f58a8d5e9ab38bf5e6afdb09d7c8Formbook UPX .NET framework(MSIL) ScreenShot PWS AntiDebug AntiVM PE File PE32 .NET EXE OS Processor Check FormBook Malware download VirusTotal Malware Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key |
16
|
19 | 12 | 14 | 11.4 | M | 43 | ZeroCERT | ||||||||||||||
|
||||||||||||||||||||||||
2 | 2023-08-10 07:54 |
AdobeSettings.exe e781ca8ce0cf2ede3c242c2bdc1ea2a4NSIS UPX Malicious Library PE File PE32 DLL AppData folder |
0.6 | M | ZeroCERT | |||||||||||||||||||
|
||||||||||||||||||||||||
3 | 2023-06-08 17:43 |
wininit.exe 8f25fe4c31de1a795ca154d7dacad298UPX Malicious Library PE File PE32 JPEG Format DLL VirusTotal Malware Check memory Creates executable files unpack itself AppData folder Windows crashed |
3.6 | M | 28 | ZeroCERT | ||||||||||||||||||
|