popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6091 2021-03-17 23:02 Abjects.txt  

ce328046ab3836eef7177159d6e080af


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces suspicious TLD Tofsee Windows DNS Cryptographic key 		4 2 1 4.2 M 34 Zero

6092 2021-03-17 23:02 6e7_2021-01-19_18-04.txt  

d4827f2bb4c0446d1bba5df00c2436b8

VirusTotal Malware ICMP traffic unpack itself Remote Code Execution DNS 		1 4.4 M 49 Zero

6093 2021-03-17 23:02 build_makros.exe  

3f1165d54ebadca8bc5a8422eb29a2aa


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows DNS Cryptographic key 		3 1 11.2 M 52 Zero

6094 2021-03-17 23:02 build_sup.txt  

5400a701c0e533f09652176253856568

VirusTotal Malware Check memory Checks debugger unpack itself crashed 		2 2.0 M 36 Zero

6095 2021-03-17 23:03 Osiris_qqkz_nauto.exe  

37c564ae4779a505b190aa2520bb7266


Gen Dridex TrickBot VirusTotal Malware Malicious Traffic buffers extracted Creates executable files unpack itself AppData folder sandbox evasion anti-virtualization IP Check Tofsee Kovter Windows Tor ComputerName DNS Cryptographic key keylogger 		21 29 40 8.4 M 51 Zero

6096 2021-03-17 23:04 1488.txt  

ce0f93d2bb7f18632d6695cf4800f436


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		2 1 10.8 M 50 Zero

6097 2021-03-17 23:09 26a5.txt  

1bf3028a0b65a4174a66f3677e872026

VirusTotal Malware Buffer PE PDB Code Injection buffers extracted unpack itself 		7.2 M 54 Zero

6098 2021-03-17 23:10 dcrat.exe  

a16225aa2cb7f0c1c4f975bb7a9eede0


Azorult .NET framework Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process malicious URLs suspicious TLD WriteConsoleW IP Check Tofsee Windows Browser Tor ComputerName DNS Software crashed keylogger 		17 5 4 18.8 M 51 ZeroCERT

6099 2021-03-17 23:11 IntelTWO.txt  

d2054b1b66e0d190be9eb250fada79fa

VirusTotal Malware AutoRuns PDB Code Injection Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution 		5.0 M 21 Zero

6100 2021-03-17 23:11 Lucky_Fixed.exe  

c481259ad199b773339f168902cc7437


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Check virtual network interfaces suspicious process malicious URLs WriteConsoleW IP Check Tofsee Windows ComputerName Cryptographic key crashed 		12 4 1 11.4 M 39 Zero

6101 2021-03-17 23:11 TeleKiller.exe  

bb0c7c3de7df87cab6e7962ceab62b0f


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key crashed 		2 4 1 10.8 M 27 Zero

6102 2021-03-17 23:12 Taurusbabac.exe  

602c4fc857abdc65397927df41fc638d

Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications suspicious process WriteConsoleW installed browsers check Windows Browser Email Cryptographic key Software crashed 		4 2 14.4 M 48 Zero

6103 2021-03-17 23:12 001.txt  

1cab063cc0c194cc5c81e71aad8a94e0


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted ICMP traffic unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows DNS Cryptographic key 		2 1 11.0 M 34 Zero

6104 2021-03-17 23:13 www.txt  

8fc65757011f067d0f35d6d4655e75d1


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows Cryptographic key 		1 4.8 M 26 Zero

6105 2021-03-17 23:13 buildcr.txt  

cca69674ecdc1dcd5ea4446577680d4b


Process Kill FindFirstVolume CryptGenKey Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows ComputerName Cryptographic key 		4 2 1 5.2 M 31 Zero

keyword