popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6541 2021-03-26 15:10 date.php  

ab70894ecc3d92c51f4086a1253bebb9


Emotet Gen Dridex TrickBot VirusTotal Malware PDB suspicious privilege Malicious Traffic Checks debugger buffers extracted ICMP traffic RWX flags setting unpack itself Check virtual network interfaces suspicious process Kovter ComputerName DNS crashed 		4 9 2 3 9.4 M 11 ZeroCERT

6542 2021-03-26 15:14 optonline.php  

2c4ba65ebe45a97b6e43a971c6ad580b

VirusTotal Malware Checks debugger unpack itself crashed 		2.4 M 42 ZeroCERT

6543 2021-03-26 15:18 mar2403.exe  

a84aad2cbe9b58a2f49a0aa913cfe2c1


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8.0 21 ZeroCERT

6544 2021-03-26 15:19 pack.exe  

4b9c4ce6bfb3627ec42b6d50420a74e5

unpack itself 		1.4 ZeroCERT

6545 2021-03-26 15:20 lol.exe  

43ee0f8e53e7a8bc3b2fb2e69fe0f198


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.4 15 ZeroCERT

6546 2021-03-26 15:23 helbb3289.tar  

b2b0ce409720d7d0693f7f1453895541


Gen VirusTotal Malware PDB Check memory unpack itself DNS crashed 		2.6 30 ZeroCERT

6547 2021-03-26 15:25 hhh.exe  

9493d47531a24062a3e20e5581f4c17c


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		5.8 20 ZeroCERT

6548 2021-03-26 16:35 userx.scr  

8aa2f93e6823ab808c2b5c55192f220c


Antivirus Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote suspicious process WriteConsoleW Windows Browser Email ComputerName DNS Cryptographic key Software crashed keylogger 		14.6 M 26 ZeroCERT

6549 2021-03-26 16:37 ebYBO10oU96aGW7.exe  

aa46a177d59c5f284f855dbed66b07b6


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself 		2.2 M 31 ZeroCERT

6550 2021-03-26 16:39 host.exe  

b59fe006636630d23d00a29b5cb0d4a8

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself Windows utilities AppData folder sandbox evasion Windows ComputerName DNS 		18 21 3 8.2 14 ZeroCERT

6551 2021-03-26 16:39 eShKTlyVQQ1s5P8.exe  

aa51238a6e01df0a9d330f67972af754


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.8 M 22 ZeroCERT

6552 2021-03-26 16:39 Rj3alDyiLXkDuFa.exe  

7dd72a955142cd20d13a9cdbff595da8


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 24 ZeroCERT

6553 2021-03-26 16:41 zxYMOD6SDfWi1bH.exe  

ba76d51c605e60f3f43240e1ec1e5c96


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		3.0 M 31 ZeroCERT

6554 2021-03-26 16:42 5VOtljiG1kQtfxU.exe  

fe7f9d8316a3a8a75af52367021b0db2


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 27 ZeroCERT

6555 2021-03-26 16:44 AFCqxjccyseSfBd.exe  

8f5603abf955b12d55fe6e763ac4fde3


Azorult .NET framework VirusTotal Malware Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		3.0 M 31 ZeroCERT

keyword