No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2021-08-09 23:34 |
vbc.exe 0941a59548b4f95082dfa17f85c6557cAgentTesla RAT PWS .NET framework Gen2 Emotet Gen1 browser info stealer Generic Malware NSIS Google Chrome User Data UPX Malicious Library Malicious Packer Admin Tool (Sysinternals etc ...) Anti_VM Socket Create Service Sniff Audio Escalate priviledges Ke VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Checks Bios Detects VirtualBox suspicious process AppData folder WriteConsoleW VMware anti-virtualization installed browsers check Windows Browser ComputerName DNS Cryptographic key Software |
1 | 15.4 | M | 56 | ZeroCERT | |||||||||||||||||
|