Submissions - ZeroBOX

Submissions

Date range button:

First seen:

Last seen:

No	Date	Request	Urls	Hosts	IDS	Rule	Score	Zero	VT	Player	Etc
1	2023-08-28 17:28	CS-Cheat-Installer.exe 64f1d67b14dafea71c599e9c5498edc2 Browser Login Data Stealer Amadey Malicious Library UPX Admin Tool (Sysinternals etc ...) Http API HTTP ScreenShot Code injection Internet API AntiDebug AntiVM PE File .NET EXE PE32 OS Processor Check DLL PE64 JPEG Format Malware download Amadey VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder suspicious TLD WriteConsoleW installed browsers check Tofsee Interception Windows Browser ComputerName DNS Cryptographic key crashed	4 Keyword trend analysis	4	9 Info ET MALWARE Amadey CnC Check-In ET DNS Query for .cc TLD SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Tofsee) ET INFO TLS Handshake Failure ET MALWARE Amadey Bot Activity (POST) ET POLICY PE EXE or DLL Windows file download HTTP ET INFO Executable Retrieved With Minimal HTTP Headers - Potential Second Stage Download ET MALWARE Amadey Bot Activity (POST) M1 ET INFO EXE IsDebuggerPresent (Used in Malware Anti-Debugging)	2	15.8	M	44	ZeroCERT

First
1
Last
Total : 1cnts