popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6751 2021-03-31 18:18 clip.exe  

56d7b785daabffb116707aeddaea4759


VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		10.4 M 20 ZeroCERT

6752 2021-03-31 18:18 IMG_501_367_089.pdf  

cfb464dbfb21e44b723e88331c126ac4


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		3 3 3.8 M 38 ZeroCERT

6753 2021-03-31 18:20 VNN.exe  

9c12b6d2301b80085c0df3cce7f90f02

VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself suspicious process Windows DNS 		1 11.2 M 19 ZeroCERT

6754 2021-03-31 18:21 invoice_344570.doc  

ca08afc75b2b74bc87663b2af0c53d55

VirusTotal Malware exploit crash unpack itself Exploit crashed 		1 4 3.4 M 27 ZeroCERT

6755 2021-03-31 18:23 PO_3351_60_20.pdf  

8ec48d6b3c508eb2b55cc4d2bbbe689e


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		6 2 3 3.4 M 18 ZeroCERT

6756 2021-03-31 18:23 regasm.exe  

d252df229e75a286174af3bd88d72661

VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		8.8 16 ZeroCERT

6757 2021-03-31 18:26 5kmaraafterupdate.exe  

3c2b4c4920ccbb7456ea0539e596948c

Browser Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder WriteConsoleW installed browsers check Ransomware Windows Browser ComputerName DNS Cryptographic key crashed 		2 4 16.8 M 13 ZeroCERT

6758 2021-03-31 18:27 regasm.exe  

489955bed03869f71b4f9639f2566905

VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files ICMP traffic unpack itself AppData folder sandbox evasion DNS 		23 23 2 6.2 M 16 ZeroCERT

6759 2021-03-31 18:27 mazx.exe  

3a5ab9cbc12960f6815d36cc3689fbcd


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		3 2 3 3.4 M 11 ZeroCERT

6760 2021-03-31 18:30 xlss.exe  

ca1edf2b6c5aa4926d38e87f22094583

VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		9.0 M 28 ZeroCERT

6761 2021-03-31 18:32 win32.exe  

2d81c310d5de35eca4ab13a91de17ddf

VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		1 2 7.2 17 ZeroCERT

6762 2021-04-01 07:46 divine11.html  

39f36486a95dd6945a63a4f028b8af54

VBScript suspicious privilege MachineGuid Code Injection WMI wscript.exe payload download Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS crashed Dropper 		32 19 10.0 M ZeroCERT

6763 2021-04-01 09:20 ret5er.exe  

68defeb5cbf90fac11e4db64d2e39ab5

VirusTotal Malware unpack itself DNS crashed 		2.0 13 ZeroCERT

6764 2021-04-01 09:21 yupmuh.rar  

eb838efdd43af0b576785bffcb48cbd1

VirusTotal Malware PDB unpack itself crashed 		1.6 6 ZeroCERT

6765 2021-04-01 09:23 qs73wd.rar  

6f3d820ee9c069a6710e743d53a9bb25

VirusTotal Malware PDB unpack itself crashed 		1.6 M 6 ZeroCERT

keyword