Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
1 2021-09-14 10:04 New_592108806100xls.exe  

9721889aa569e1cfd50d9578572d514c


RAT PWS .NET framework Generic Malware Antivirus PE File .NET EXE PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed
4 8.6 M 15 ZeroCERT

2 2021-09-14 10:00 re_85412000040631.exe  

2c0b0eefba55c2f87d69a6bf911393ee


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 FormBook Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed
5 16 1 13.2 M 28 ZeroCERT

3 2021-09-14 09:56 Re_904656001200037xls.exe  

bc2b9bca947ae4fa75b70d0ee7ebf69e


RAT PWS .NET framework Generic Malware Antivirus AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware powershell Buffer PE suspicious privilege Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut ICMP traffic RWX flags setting unpack itself powershell.exe wrote suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed
4 12.0 M 16 ZeroCERT

  • First
  • 1
  • Last
  • Total : 3cnts