No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2021-11-18 08:35 |
8102_1637053425_3753.exe 58e37acf9f2ad681a0fdb5470315ed4fRAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File PE32 .NET EXE Browser Info Stealer FTP Client Info Stealer VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Collect installed applications powershell.exe wrote suspicious process WriteConsoleW installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed |
2 | 12.6 | 29 | ZeroCERT | ||||||||||||||||||
|