popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
46591 2021-04-08 13:20 clip-per.exe  

90639ca4a2ccbc468b4b00d0fbce51e4


Azorult .NET framework AsyncRAT backdoor Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		9.6 ZeroCERT

46592 2021-04-08 12:20 Practical3.ex_  

8819d7f8069d35e71902025d801b44dd


Antivirus VirusTotal Malware PDB suspicious privilege Check memory WMI Windows utilities WriteConsoleW Windows ComputerName 		5.0 50 guest

46593 2021-04-08 11:39 ooo.exe  

9a0848614ef4a9cccffd1ec54c35d04d


Azorult .NET framework Emotet Gen1 Gen2 AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder installed browsers check Windows Browser Email ComputerName Cryptographic key Software crashed 		12.8 M 58 ZeroCERT

46594 2021-04-08 11:15 install.exe  

433f8ca64803e4678febbca7902909bb

VirusTotal Malware MachineGuid Check memory Checks debugger Creates executable files unpack itself AppData folder ComputerName crashed 		3.6 51 ZeroCERT

46595 2021-04-08 09:50 ooo.exe  

9a0848614ef4a9cccffd1ec54c35d04d


Azorult .NET framework Emotet Gen1 Gen2 AsyncRAT backdoor Browser Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself AppData folder installed browsers check Windows Browser ComputerName DNS crashed 		12.0 M 58 ZeroCERT

46596 2021-04-08 09:42 rtr3.exe  

a062400119a4a2b81e8465cd91c145d7

VirusTotal Malware 		1.2 M 12 ZeroCERT

46597 2021-04-08 09:40 fter.exe  

cfb0292715c8260295e34dfd0080879b


Emotet VirusTotal Malware Code Injection buffers extracted RWX flags setting unpack itself AntiVM_Disk VM Disk Size Check crashed 		5.4 M 12 ZeroCERT

46598 2021-04-08 09:39 tett.exe  

2939f396d5b175b2e1f28b05c09e812b

VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Malicious Traffic buffers extracted RWX flags setting unpack itself Check virtual network interfaces suspicious process IP Check ComputerName DNS crashed 		16 19 11.2 M 20 ZeroCERT

46599 2021-04-08 09:38 sd3672.exe  

3478322eeb8ae0134a8bbea54b6e1c7c

VirusTotal Malware Check memory Creates shortcut Creates executable files unpack itself Windows utilities AppData folder AntiVM_Disk sandbox evasion VM Disk Size Check installed browsers check Windows Browser ComputerName 		1 2 6.0 M 24 ZeroCERT

46600 2021-04-08 09:36 lv.exe  

eee8b6b36e877d7294ca94dc10d7f53a


Malicious Library Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows 		1 6.4 M ZeroCERT

46601 2021-04-08 09:33 cv76.exe  

c41188e4415567a1465712a6c85331a6

VirusTotal Malware Code Injection Check memory Creates executable files ICMP traffic unpack itself Windows utilities sandbox evasion Windows ComputerName DNS 		1 6.8 M 18 ZeroCERT

46602 2021-04-08 09:33 ya.exe  

68e2ff114060c1bfc6d2398b860e70b0


Malicious Library Browser Info Stealer VirusTotal Malware Buffer PE AutoRuns Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk suspicious TLD WriteConsoleW VM Disk Size Check Windows Browser ComputerName DNS crashed 		2 3 13.4 14 ZeroCERT

46603 2021-04-08 09:31 arinzex.scr  

b9a31ec9cf6084d9ea4543ae5454f6c0


Antivirus AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut ICMP traffic unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		6 2 15.4 15 ZeroCERT

46604 2021-04-08 09:31 omar.exe  

13db34cab435d9858269c5e823f4b575


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs WriteConsoleW installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		3 4 15.0 37 ZeroCERT

46605 2021-04-08 09:30 svchost.exe  

c09ca2b69268d3d5ad0243b64ea2a179

VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2 2 3.2 M 22 ZeroCERT

keyword