Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2024-09-07 16:30	mony.exe d3d04b9a91899184dd243d0c9339928a Malicious Library PE File .NET EXE PE32 VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS		1			4.2	M	55	guest

2	2022-05-26 09:58	mony.exe d3d04b9a91899184dd243d0c9339928a PWS[m] RAT NPKI email stealer UPX Malicious Library Malicious Packer DNS Code injection KeyLogger Downloader Escalate priviledges persistence AntiDebug AntiVM PE32 .NET EXE PE File OS Processor Check DLL PE64 Browser Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key DDNS crashed	1 Keyword trend analysis	3	1		15.0	M	33	ZeroCERT

3	2022-02-01 17:21	macwx.exe 00e84b6fa4bc44283827fdfed408acb2 RAT Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key crashed	2 Keyword trend analysis	2	1		12.4		17	ZeroCERT

First
1
Last
Total : 3cnts