popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
5941 2021-03-14 12:17 gZozYQsZNAIR9bV.exe  

2ba1022a54bbea2f9f692bca6db317b7


AsyncRAT backdoor FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs WriteConsoleW Windows ComputerName DNS 		10 14 1 12.2 M 23 ZeroCERT

5942 2021-03-15 09:47 ini.exe  

b05be8386525dadcc8188a1c97763ce8


ftp Client info stealer email stealer Win Trojan agentTesla browser Google Chrome User Data Download management AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows Tor ComputerName Cryptographic key crashed 		12.0 50 ZeroCERT

5943 2021-03-15 09:49 lilal1.exe  

331064627d4361c3f3e3ba15d4d75afc


Malicious Library VirusTotal Malware Buffer PE Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS Cryptographic key 		1 3 13.0 41 ZeroCERT

5944 2021-03-15 10:15 winlog.exe  

9bdc8f00b437a66c1f1f0b6b45849d04


Generic Malware VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion 		5.0 46 r0d

5945 2021-03-15 10:15 winlog.exe  

9bdc8f00b437a66c1f1f0b6b45849d04


Generic Malware VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion 		5.0 46 r0d

5946 2021-03-15 10:22 winlog.exe  

9bdc8f00b437a66c1f1f0b6b45849d04


Generic Malware VirusTotal Malware suspicious privilege Check memory Creates executable files unpack itself AppData folder malicious URLs sandbox evasion 		5.0 46 r0d

5947 2021-03-15 12:22 office.exe  

aaf2bc562f565342a8a779d3b5d796ed


AsyncRAT backdoor VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Windows ComputerName Cryptographic key 		2 2 1 3.4 17 ZeroCERT

5948 2021-03-15 12:29 office.exe  

aaf2bc562f565342a8a779d3b5d796ed


AsyncRAT backdoor VirusTotal Malware Check memory Checks debugger unpack itself Check virtual network interfaces malicious URLs Windows ComputerName Cryptographic key 		2 2 1 3.4 17 guest

5949 2021-03-15 12:29 PkgV01.00.00.exe  

ebfe3cc196712a6c4b09fcc2c9790fd0


Emotet AsyncRAT backdoor VMProtect Antivirus Gen VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities AppData folder malicious URLs sandbox evasion WriteConsoleW GameoverP2P Zeus Windows Browser ComputerName Trojan Banking DNS 		12.8 44 ZeroCERT

5950 2021-03-15 13:29 PkgV01.00.00.exe  

ebfe3cc196712a6c4b09fcc2c9790fd0


Emotet AsyncRAT backdoor VMProtect Antivirus Gen VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger WMI Creates executable files unpack itself Windows utilities AppData folder malicious URLs AntiVM_Disk sandbox evasion WriteConsoleW VM Disk Size Check GameoverP2P Zeus Windows Browser ComputerName Trojan Banking 		12.0 44 ZeroCERT

5951 2021-03-15 15:14 svchost.exe  

c3477d94caf7b8dc32f26afa5fc908fc


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software 		1 2 2 12.0 45 guest

5952 2021-03-15 15:27 Cuckoo_AI.txt  

1dc6a2a22b299d80df8826ce6051260e

Check memory unpack itself 		1.0 guest

5953 2021-03-15 15:37 Cuckoo_AI.txt  

1dc6a2a22b299d80df8826ce6051260e

Check memory unpack itself 		1.0 guest

5954 2021-03-15 16:16 Cuckoo_AI.txt  

1dc6a2a22b299d80df8826ce6051260e

Check memory unpack itself 		1.0 guest

5955 2021-03-15 16:26 login.vbs  

49f685bf27de38094374336be540b200


Antivirus Malware VBScript powershell Buffer PE suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted wscript.exe payload download Creates shortcut unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key DDNS Dropper 		3 5 2 10.0 r0d

keyword