popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-08-21 04:29 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		3 4 3 11.4 guest

2 2021-08-21 04:28 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		4 4 3 12.2 guest

3 2021-08-21 04:26 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer AntiDebug AntiVM PE File OS Processor Check PE32 .NET EXE AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces AppData folder AntiVM_Disk WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		4 4 3 12.6 guest

4 2021-08-21 04:18 DCRatBuild.exe  

8b9163cd83793b088066e54dfd74c62f


Gen2 RAT Gen1 Generic Malware Malicious Library Malicious Packer DGA DNS Socket Create Service Sniff Audio Escalate priviledges KeyLogger Code injection HTTP Internet API FTP ScreenShot Http API Steal credential Downloader P2P AntiDebug AntiVM PE File OS AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder AntiVM_Disk suspicious TLD WriteConsoleW IP Check VM Disk Size Check Tofsee Windows ComputerName Remote Code Execution crashed keylogger 		2 4 3 13.0 guest

  • First
  • 1
  • Last
  • Total : 4cnts
keyword