Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2022-10-01 13:00 jag.exe  

0bcea97bbf8109cb95c4483a60bcf3f8


PWS[m] RAT PWS .NET framework SMTP KeyLogger AntiDebug AntiVM PE32 PE File .NET EXE VirusTotal Malware PDB suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces IP Check ComputerName DNS DDNS
1 2 2 9.4 M 37 ZeroCERT

2 2022-04-04 21:24 AsusFontMode.exe  

fddfb395afa39d5678a56b0f247bad49


RAT PWS .NET framework AntiDebug AntiVM .NET EXE PE32 PE File VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key
1 8.0 M 20 ZeroCERT

3 2021-12-08 10:59 m2-09.exe  

f670d4f35079acdbb5e7c5b58286ad1d


RAT PWS .NET framework Generic Malware AntiDebug AntiVM PE File PE32 .NET EXE FormBook Malware download VirusTotal Malware PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
8 18 2 8 8.0 M 13 ZeroCERT

4 2021-08-21 09:10 TF7vGJml6S1lQxR.exe  

f108b8fcf5fa07d914b587c85b19b38b


RAT PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key
3.0 M 26 ZeroCERT

5 2021-05-24 18:17 rYMtUTp556Z02qL.exe  

76c61f35c06b4d510bc59d3f8aa42fea


AsyncRAT backdoor PWS .NET framework Malicious Library .NET EXE PE File PE32 VirusTotal Malware PDB Check memory Checks debugger unpack itself Windows Cryptographic key
2.0 8 ZeroCERT

6 2021-05-11 09:15 bdell.exe  

7278d1fc666d4c3dd033cbf2e39a60ff


AsyncRAT backdoor PWS .NET framework Malicious Library SMTP KeyLogger AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed
11.0 M 23 ZeroCERT

7 2021-04-26 18:04 winlog.exe  

b49746e926f5e9398910a1c72f5c8aa6


PWS .NET framework Loki Malicious Library AsyncRAT backdoor Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs suspicious TLD installed browsers check Windows Browser Email ComputerName Cryptographic key Software
1 2 7 13.0 15 ZeroCERT

  • First
  • 1
  • Last
  • Total : 7cnts