popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6181 2021-03-18 18:08 SJlhd.jpg  

8c8dc5f35bdf12d4051c5a506e7fb072


Process Kill FindFirstVolume CryptGenKey Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		3 2 1 6.4 16 ZeroCERT

6182 2021-03-18 18:12 abman.exe  

7f21e3c00e304c66cd2c2d00f81adb51


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.4 15 ZeroCERT

6183 2021-03-18 18:12 saber.exe  

9be7ceaf74ddf6accd91f06b7ae99c76


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		11.2 M 22 ZeroCERT

6184 2021-03-18 18:16 abman.exe  

7f21e3c00e304c66cd2c2d00f81adb51


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		9.6 15 ZeroCERT

6185 2021-03-18 18:18 rev3.dll  

5bab87140fed67a1a1d4480753e68e46


Emotet Trickbot Gen VirusTotal Malware Remote Code Execution 		1.2 M 14 ZeroCERT

6186 2021-03-18 18:18 saber-08.exe  

3cc99d56c71f1ec7930983f0a3c1396e


ftp Client info stealer email stealer Win Trojan agentTesla browser Google Chrome User Data Download management AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Ransomware Windows Tor ComputerName DNS Cryptographic key crashed 		13.8 M 21 ZeroCERT

6187 2021-03-18 18:21 xncJF.jpg  

05ade671828a036852f5906bed805c88


Process Kill FindFirstVolume CryptGenKey Antivirus VirusTotal Malware powershell suspicious privilege Check memory Checks debugger Creates shortcut unpack itself powershell.exe wrote suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		1 2 1 5.6 M 22 ZeroCERT

6188 2021-03-18 18:21 saber-09.exe  

29ffb1e47f6ceee549db39d4cb18a6a6


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process malicious URLs WriteConsoleW Windows ComputerName Cryptographic key crashed 		12.6 M 30 ZeroCERT

6189 2021-03-18 18:27 vbc.exe  

6cfcc46ac40c7fccc985e8cbc71c9dbf


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows ComputerName Cryptographic key crashed 		10.0 M 34 ZeroCERT

6190 2021-03-18 18:28 VHU.exe  

028060917c95a856fbc9b90be0512666


Google Chrome User Data browser info stealer Generic Malware VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process malicious URLs Windows DNS 		11.8 M 23 ZeroCERT

6191 2021-03-18 18:30 winlog.exe  

fcd3737d717fcf3402b9ed9f84eca28c

Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Browser Email ComputerName Software 		1 11.6 M 32 ZeroCERT

6192 2021-03-19 08:12 abnol.exe  

c4b7965e03a154956c35e3f1a2486e7d


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.4 18 ZeroCERT

6193 2021-03-19 08:17 doglox.exe  

c47b1974b73196909a2e1647b2c73000


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		5.6 17 ZeroCERT

6194 2021-03-19 08:20 6gdwwv.exe  

77be0dd6570301acac3634801676b5d7

VirusTotal Malware ICMP traffic IP Check DNS 		1 4 1 4.8 M 59 ZeroCERT

6195 2021-03-19 08:22 mcnam.exe  

d93d72caaa511c0715063a464bf231ff


Azorult .NET framework Google Chrome User Data browser info stealer VirusTotal Malware Buffer PE Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key keylogger 		2 11.2 M 29 ZeroCERT

keyword