popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6571 2021-03-27 11:24 ret3.exe  

86506e4534b7433da308a39b0df63cfa


VirusTotal Malware unpack itself crashed 		1.2 15 ZeroCERT

6572 2021-03-27 11:26 Encoding.html  

d7bb6b9d1cd02209f89dc0c4759ddd87


VirusTotal Malware crashed 		0.6 2 ZeroCERT

6573 2021-03-27 11:28 svchost.exe  

6c4d7f39e594a4a0a11a7d8b9372c55d


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware Check memory Checks debugger unpack itself 		2.0 M 20 ZeroCERT

6574 2021-03-27 11:32 r10a.dll  

588a3f2c94dde4650de944d6ceb90b81


Emotet Gen VirusTotal Malware AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities sandbox evasion Windows ComputerName Remote Code Execution DNS 		1 7.8 M 3 ZeroCERT

6575 2021-03-27 11:33 winlog.exe  

d178c14362d0e9f7f76cd0dd6c90ef2c


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.8 M 34 ZeroCERT

6576 2021-03-27 11:34 dchampx.scr  

568a83b031d0da4516f635799e12ffb2


Antivirus AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself Disables Windows Security powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		3 2 17.4 M 25 ZeroCERT

6577 2021-03-27 11:36 Encoding.html  

d7bb6b9d1cd02209f89dc0c4759ddd87


Antivirus Malware download VirusTotal Malware powershell suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		4 3 3 10.6 M 2 ZeroCERT

6578 2021-03-27 11:39 winlog.exe  

17b26019431fda27f9470f0dd665e131

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder sandbox evasion ComputerName DNS 		10 15 1 7.0 M 35 ZeroCERT

6579 2021-03-27 15:46 customer2.exe  

dae3a7fe77e7ff4d1af2a2691dfb4d9a


Gen Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process WriteConsoleW installed browsers check Windows Exploit Browser ComputerName Remote Code Execution DNS crashed 		2 4 12.2 53 ZeroCERT

6580 2021-03-27 16:05 customer3.exe  

762ab2472d5f4811ee77c0b67f1f05c7


Google Chrome User Data browser info stealer Gen Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Exploit Browser ComputerName Remote Code Execution crashed 		2 4 13.2 35 ZeroCERT

6581 2021-03-27 16:05 customer1.exe  

bd77b4fbc696b109e89d869d64c1c969


Google Chrome User Data browser info stealer Gen Browser Info Stealer VirusTotal Malware PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger WMI Creates executable files exploit crash unpack itself Windows utilities suspicious process malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Exploit Browser ComputerName Remote Code Execution crashed 		2 4 13.4 50 ZeroCERT

6582 2021-03-28 12:03 .................................  

0b1e7e8f5df88aab779c84f38e6db605

Malware download VirusTotal Malware Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		1 4 6 1 4.0 M 27 ZeroCERT

6583 2021-03-28 12:05 def.exe  

04a666d7cf692764645f28189bdb2e70

VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself Windows utilities Disables Windows Security suspicious process WriteConsoleW Windows ComputerName 		7.6 33 ZeroCERT

6584 2021-03-28 12:11 Token_Stealer.bat  

875b7c5612a875cc7f31644a1c49dfb5

VirusTotal Malware Check memory Windows utilities WriteConsoleW Windows 		1 2.0 7 ZeroCERT

6585 2021-03-28 12:11 RunpeTest.exe  

b5ea5f2650f82f53059635551ae31469

VirusTotal Malware PDB DNS 		2.0 48 ZeroCERT

keyword