| No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | 2024-07-15 09:29 |
 SIP.03746.XSLSX.exe a3e681364daaa68ce0177581573f483fEmotet Generic Malware Malicious Library Antivirus UPX Confuser .NET .NET framework(MSIL) AntiDebug AntiVM DllRegisterServer dll PE File PE32 MZP Format PowerShell CAB .NET EXE VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote Check virtual network interfaces suspicious process suspicious TLD anti-virtualization installed browsers check Tofsee Windows Browser ComputerName Cryptographic key |
3 | 2 | 12.2 | 38 | ZeroCERT | |||||||||||||||||
|
|
||||||||||||||||||||||||
| 2 | 2024-07-15 09:19 |
 SIP.03746.XSLSX.exe a3e681364daaa68ce0177581573f483fMalicious Library Antivirus UPX DllRegisterServer dll PE File PE32 MZP Format VirusTotal Malware |
1.4 | 38 | ZeroCERT | |||||||||||||||||||
|
|
||||||||||||||||||||||||
- First
- 1
- Last
- Total : 2cnts