Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2022-02-03 11:39	File.exe 0e164449ac31bff3bd517183d14c12ff RAT PWS .NET framework Generic Malware PE File PE32 .NET EXE VirusTotal Malware PDB Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Tofsee ComputerName		2	1		4.0	M	41	ZeroCERT

2	2021-11-10 18:19	7667_1636198353_7510.exe 74e5ee47e3f1cec8ad5499d20d5e200d RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed	2 Keyword trend analysis Info https://bbuseruploads.s3.amazonaws.com/106c20d9-164b-4dd4-b490-03c87b0b7644/downloads/404d411e-cff1-4a6e-a692-35848ebfb2a2/z1az1z1.jpeg?Signature=0a%2FaUfxFDTKKfGp7%2F%2FiM2E3ZALY%3D&Expires=1636537029&AWSAccessKeyId=AKIA6KOSE3BNJRRFUUX6&versionId=paeg0MfP4Nlgy9V.oFLvS3IwE8D98C8O&response-content-disposition=attachment%3B%20filename%3D%22z1az1z1.jpeg%22 https://bitbucket.org/chege3/softwarellc/downloads/z1az1z1.jpeg	7	1		14.0		35	ZeroCERT

3	2021-11-08 12:25	3613_1636286721_5720.exe fc0fc8c35a5808938bc23e31937ff028 RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself Windows utilities Collect installed applications powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key crashed	2 Keyword trend analysis Info https://bbuseruploads.s3.amazonaws.com/dd8f3efb-aea4-4888-a2bc-db69074fc43e/downloads/119951ca-7c8e-4d95-b51f-61fadc093c31/staring.jpg?Signature=43Ph6WHOk0HRvhGlAutHLQZ0fck%3D&Expires=1636343319&AWSAccessKeyId=AKIA6KOSE3BNJRRFUUX6&versionId=7voAXZQSELk6cuYYOiZPoMRibHpYCAvb&response-content-disposition=attachment%3B%20filename%3D%22staring.jpg%22 https://bitbucket.org/setupfx1/software/downloads/staring.jpg	7	1		16.0		26	ZeroCERT

4	2021-11-05 09:24	1323_1635962037_1167.exe 036f4601b88c52668d279cf3fcce2a97 RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed	2 Keyword trend analysis Info https://bitbucket.org/chege3/softwarellc/downloads/mell.bin https://bbuseruploads.s3.amazonaws.com/106c20d9-164b-4dd4-b490-03c87b0b7644/downloads/291e829a-706c-448b-8691-84b28b6ee892/mell.bin?Signature=obF3uGNzicfLJDvOFCqioVS3WXE%3D&Expires=1636073254&AWSAccessKeyId=AKIA6KOSE3BNJRRFUUX6&versionId=M4AHPxUlgmoZgxVCyagleDv_UaGESwPf&response-content-disposition=attachment%3B%20filename%3D%22mell.bin%22	11	1		14.0		33	ZeroCERT

5	2021-08-19 10:21	file3.exe 6980597a4822f4cadea9ac264711ebd2 RAT BitCoin Generic Malware UPX Malicious Library AntiDebug AntiVM PE File OS Processor Check .NET EXE PE32 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Tofsee Windows Browser ComputerName DNS Cryptographic key Software crashed	2 Keyword trend analysis	3	2		13.0	M	26	ZeroCERT

First
1
Last
Total : 5cnts