No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2023-05-23 17:21 |
bld_3s.exe 44b65c0e74a1c608b202a663318f966dEmotet PWS .NET framework Loki_b RAT UPX OS Processor Check .NET EXE PE File PE32 VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces IP Check Windows ComputerName DNS Cryptographic key |
15
|
5 | 1 | 13 | 5.6 | M | 44 | ZeroCERT | ||||||||||||||
|
||||||||||||||||||||||||
2 | 2023-05-23 09:21 |
bld_3.exe e2ca6f8e77cbaa4a7adf56242880a30cRAT Emotet PWS .NET framework Loki_b UPX Malicious Packer .NET EXE PE File PE32 OS Processor Check VirusTotal Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder IP Check Windows ComputerName DNS Cryptographic key |
16
|
5 | 5 | 13 | 7.6 | M | 34 | ZeroCERT | ||||||||||||||
|