Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2023-11-15 07:51 audiodgse.exe  

a491f4dbb2e8aedd957e0f69b0562726


LokiBot .NET framework(MSIL) Socket PWS DNS AntiDebug AntiVM PE32 PE File .NET EXE Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs AntiVM_Disk suspicious TLD VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software
1 2 9 12.6 M ZeroCERT

2 2023-11-14 07:58 wininit.exe  

e746086f470668fe6cfc3da407fdd032


Formbook Generic Malware .NET framework(MSIL) Antivirus PWS DNS AntiDebug AntiVM PE32 PE File .NET EXE FormBook Malware download Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key
6 7 1 11.0 M ZeroCERT

  • First
  • 1
  • Last
  • Total : 2cnts