popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5896 2021-03-11 18:52 Invoice.exe  

f99fbbda34957150a2c05dbb195e7657


Antivirus AsyncRAT backdoor Malware download AsyncRAT Dridex NetWireRC TrickBot VirusTotal Malware powershell AutoRuns suspicious privilege Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process AppData folder malicious URLs sandbox evasion WriteConsoleW Kovter Windows ComputerName DNS Cryptographic key DDNS crashed 		2 5 3 2 13.6 M 12 ZeroCERT

5897 2021-03-12 09:19 Payment Invoice.exe  

11aba0510bad95a7b385c86d00d9626c


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows DNS Cryptographic key 		1 3 1 12.4 M 15 ZeroCERT

5898 2021-03-12 09:56 9BodUd5kI1nYXHR.exe  

92ba638ea41b8d8653906fc653e54aa0


Loki Azorult .NET framework Browser Info Stealer LokiBot Malware download FTP Client Info Stealer Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 7 1 11.6 M ZeroCERT

5899 2021-03-12 10:21 REQUEST FOR QUOTATION.exe  

0de43aaaea16c9a582370553e9edecf1


AsyncRAT backdoor VirusTotal Malware Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key 		9.6 22 ZeroCERT

5900 2021-03-12 10:21 Payment receipt.exe  

2bd6dce81140df7d3b1aded2093bfddc


Antivirus AsyncRAT backdoor VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		2 3 2 15.0 M 14 ZeroCERT

5901 2021-03-12 11:55 493745173.exe  

b582051ea2ba53c5c4c57e0580e88bd1


UltraVNC VirusTotal Malware PDB Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Windows DNS Cryptographic key crashed 		1 7.0 M 55 guest

5902 2021-03-12 11:56 117627132.exe  

8facf3fbd4f254baa6cff18055fba078


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key 		1 2 1 5.2 M 52 guest

5903 2021-03-12 12:42 675933445.exe  

6570ab9cc7574be94cbd7def47089e76


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Tofsee Ransomware Windows Browser ComputerName DNS Cryptographic key Software crashed 		3 5 2 14.0 M 43 ZeroCERT

5904 2021-03-12 12:44 494818992.exe  

a1dbce02232adc2298ea67e387694b42

VirusTotal Malware AutoRuns suspicious privilege MachineGuid Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Remote Code Execution DNS 		10.6 M 53 ZeroCERT

5905 2021-03-12 13:43 872027265.exe  

f9193808726bf166c76170b5020edb00


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs suspicious TLD installed browsers check Tofsee Ransomware Windows Browser ComputerName Cryptographic key Software crashed 		3 10 1 14.2 M 55 ZeroCERT

5906 2021-03-12 13:44 1618469631.exe  

31055a78f49e732959933d81f7ee4de1


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Windows DNS Cryptographic key 		1 5.6 M 55 ZeroCERT

5907 2021-03-12 14:14 1694582027.exe  

e4e9be25d58ace415d3c1481986b99ff


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows Cryptographic key 		1 2 1 4.6 M 53 ZeroCERT

5908 2021-03-12 14:15 1740773763.exe  

cf75f0b1db8bf6733a56de4e83185314

Malware download VirusTotal Malware Check memory Creates executable files unpack itself suspicious process malicious URLs WriteConsoleW WordPress DNS 		2 1 5.2 M 34 ZeroCERT

5909 2021-03-12 14:24 1776646202.exe  

c4007a10fead6776db900abff2ae55b2


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs suspicious TLD Tofsee Windows DNS Cryptographic key 		1 2 1 5.0 M 32 ZeroCERT

5910 2021-03-12 14:25 1873085694.exe  

fea26a213a022eb79c3f7dee7f9d107a


UltraVNC AsyncRAT backdoor VirusTotal Malware Buffer PE PDB Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces AppData folder malicious URLs suspicious TLD Tofsee Windows Cryptographic key crashed 		3 4 1 7.6 M 49 ZeroCERT

keyword