Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Score	Zero	VT	Player
1	2021-07-23 09:28	egdgh.exe 5d751931eb3477f5e7d340606b381db2 PWS Loki[b] Loki[m] .NET framework RAT Generic Malware Admin Tool (Sysinternals etc ...) DNS Socket KeyLogger HTTP Internet API ScreenShot Http API AntiDebug AntiVM PE32 .NET EXE PE File Malware download Azorult VirusTotal Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key	1 Keyword trend analysis	2	1	9.0	M	19	ZeroCERT

2	2021-06-06 09:56	loud-098.exe 5f8f8e08669e510154136dce28f0630b PWS .NET framework Anti_VM Malicious Library AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key				7.6	M	17	ZeroCERT

3	2021-05-25 09:38	bin.exe 6ab96e3529b17180141109a469eb5a43 AsyncRAT backdoor PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key				8.2		22	ZeroCERT

4	2021-05-18 09:00	C3b.exe edc4dc3947bcadc3039095321c71572a Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 Malware download NetWireRC VirusTotal Malware Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW BitRAT Windows ComputerName DNS DDNS keylogger		2	1	13.6		48	ZeroCERT

5	2021-04-19 21:40	xvhostb.exe 2b0ddd050806aebc7d52fb39a313b08e VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key				7.2		18	ZeroCERT

6	2021-04-19 17:11	orgg.exe a53cb89c79820a3ad6b1a157d6a31eec PWS .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed				12.0	M	21	ZeroCERT

7	2021-04-16 18:03	orr7-02.exe c1a7b6180d5dc3ab24df1d3a2a5532b9 AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed				11.6	M	20	ZeroCERT

8	2021-04-08 19:43	origg-01.exe 133b4a863e9a9c74b7320f54abf199d7 Azorult .NET framework Check memory Checks debugger unpack itself Windows DNS Cryptographic key				2.0	M		ZeroCERT