Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-10-14 16:52 New Order.exe  

76ce20e50cfef6b8e5397b581105ba95


PWS .NET framework Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Malware download Nanocore Malware c&c powershell Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS
3 2 14.8 ZeroCERT

2 2021-10-14 16:47 EXPORT DOCUMENTS_CMR_INVOICE_I...  

0a3212c04eeaed201c4038ab6dd3631b


Generic Malware UPX Antivirus DNS AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE Buffer PE AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Windows utilities suspicious process WriteConsoleW human activity check Windows ComputerName DNS Cryptographic key DDNS
3 1 14.2 ZeroCERT

3 2021-10-14 09:36 deo.exe  

6429aa83e4bc083b4f0b3f44b0d7950f


PWS .NET framework Generic Malware UPX AntiDebug AntiVM PE File PE32 OS Processor Check .NET EXE FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself
16 19 1 12 8.2 M 18 ZeroCERT

  • First
  • 1
  • Last
  • Total : 3cnts