popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6601 2021-03-29 14:05 musteri.exe  

c64253856d7af67fb3a75fe2cfcffd09


VirusTotal Malware PDB Check memory RWX flags setting unpack itself 		2.0 20 guest

6602 2021-03-29 14:05 musteri.exe  

c64253856d7af67fb3a75fe2cfcffd09


VirusTotal Malware PDB Check memory RWX flags setting unpack itself DNS 		1 2.6 20 guest

6603 2021-03-29 14:06 musteri.exe  

c64253856d7af67fb3a75fe2cfcffd09


VirusTotal Malware PDB unpack itself 		2 1.4 20 guest

6604 2021-03-29 14:07 musteri.exe  

c64253856d7af67fb3a75fe2cfcffd09


VirusTotal Malware PDB Check memory RWX flags setting unpack itself 		2 2.0 20 guest

6605 2021-03-29 14:22 results  

99c3d484c74f3595e7e5c1940f75a76e


Email Client Info Stealer Malware Code Injection Malicious Traffic Check memory Checks debugger unpack itself Tofsee Windows Browser Email DNS 		2 2 3 4.8 guest

6606 2021-03-29 17:54 PO_7201_60_74.pdf  

83c01f327b9dad9768ca0e9703d4e34a


Antivirus AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut unpack itself powershell.exe wrote Check virtual network interfaces suspicious process WriteConsoleW IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		5 6 4 3 15.6 M 19 ZeroCERT

6607 2021-03-29 17:55 winlog.exe  

7f675ad4beeabb7fd62a9750a499570e

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder sandbox evasion DNS 		12 26 2 4.6 M 7 ZeroCERT

6608 2021-03-29 17:56 745584778.js  

65f5e916c44ce0e15b66dc940c1e70c1

Malware AutoRuns Creates executable files Windows utilities suspicious process WriteConsoleW Windows ComputerName 		2 5.0 guest

6609 2021-03-29 17:56 winlog.exe  

c7412ea19bbb688a8cfc8ee443e900f4


Azorult .NET framework AsyncRAT backdoor suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		2 10.6 ZeroCERT

6610 2021-03-29 17:57 winlog.exe  

4b7075ac72e26465423a8f25a5e5cc35

FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself Windows utilities AppData folder sandbox evasion Windows DNS 		16 25 1 8.0 M 10 ZeroCERT

6611 2021-03-29 17:58 xls.exe  

c0615abb7bf663bed3b32f2c1b3808e1


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2 5.6 15 ZeroCERT

6612 2021-03-29 17:58 jan11.exe  

5368930e073889874745e520be58b06d


AsyncRAT backdoor VirusTotal Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Ransomware Windows ComputerName DNS crashed keylogger 		1 12.0 14 ZeroCERT

6613 2021-03-29 17:59 745584778.js  

65f5e916c44ce0e15b66dc940c1e70c1

Malware AutoRuns Creates executable files Windows utilities suspicious process WriteConsoleW Windows ComputerName 		3 5.0 ZeroCERT

6614 2021-03-29 18:00 org.exe  

53cbb91272801963c8a1939f01533edb


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key crashed 		2 11.8 M 13 ZeroCERT

6615 2021-03-29 18:02 OaZ1lioRycGNrN3.exe  

283ebf143882c80ebe4f5f1d906546de


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName crashed 		12.0 M 40 ZeroCERT

keyword