popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
6856 2021-04-02 10:45 r104.exe  

d2749c21fa8671e75cd147380ff110e0


VirusTotal Malware AutoRuns Code Injection Malicious Traffic Check memory buffers extracted Creates executable files ICMP traffic unpack itself Windows utilities suspicious process sandbox evasion Windows ComputerName DNS 		1 2 11.4 M 6 ZeroCERT

6857 2021-04-02 10:46 beiybj.zip  

164551e24aa4d9ad6cb545a3d09e1348


Gen1 VirusTotal Malware PDB MachineGuid Malicious Traffic Checks debugger unpack itself Collect installed applications installed browsers check Browser ComputerName DNS crashed 		1 1 6.2 M 53 ZeroCERT

6858 2021-04-02 10:48 iabi.exe  

9d98cfac482b35090e0604e13699a40c

VirusTotal Malware Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		2.8 M 4 ZeroCERT

6859 2021-04-02 10:48 Zenar.exe  

85fe410ff23b4ef7db799ecdf574dd91

VirusTotal Malware Buffer PE PDB Check memory buffers extracted Creates executable files unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Browser DNS 		2 3 7.6 M 28 ZeroCERT

6860 2021-04-02 10:50 last.sct  

a1269f636a62fc84b85d508244db0db5

VirusTotal Malware Code Injection Check memory unpack itself DNS 		2.8 M 13 ZeroCERT

6861 2021-04-02 10:50 u8muj5t.zip  

30315eed5f5ade346b5ccfcc452310bf

VirusTotal Malware PDB unpack itself crashed 		2.0 M 28 ZeroCERT

6862 2021-04-02 10:52 AzQcBgcWyFzwiyxiYMiwahvAS65uNb  

a4389b334e80bd96442138b2dd196209

VirusTotal Malware MachineGuid buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 9.6 M 35 ZeroCERT

6863 2021-04-02 10:53 rldr.10.4.exe  

81e6dcf2510ffc2400743e912448013f

VirusTotal Malware AutoRuns PDB Code Injection Malicious Traffic Check memory buffers extracted Creates executable files ICMP traffic RWX flags setting unpack itself Windows utilities suspicious process sandbox evasion Windows ComputerName DNS 		2 2 1 12.8 M 6 ZeroCERT

6864 2021-04-02 10:53 reg.bk.exe  

3fb887b5886aaf9b3b5103d868c56c84


Emotet Gen2 Gen1 Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns Check memory Checks debugger Creates executable files unpack itself AppData folder installed browsers check Windows Browser DNS Software 		5.8 M 61 ZeroCERT

6865 2021-04-02 10:55 arinzex.scr  

fe2586650c7f097a036219c7b4749544


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces 		2 2 2 3.0 M 18 ZeroCERT

6866 2021-04-02 10:59 boost-fps.exe  

92fc1129af30ba08a79113624f51bcb7

Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser ComputerName DNS Software crashed 		17 6 16 15.4 M 24 ZeroCERT

6867 2021-04-02 10:59 AsyncClientCrypt.exe  

73e662d533f7469a086abb6ec7de6c94


AsyncRAT backdoor VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces suspicious process AppData folder WriteConsoleW Windows ComputerName DNS 		1 4 14.0 M 47 ZeroCERT

6868 2021-04-02 10:59 belgium.sct  

9d1245b404d17ab4fd7616915a473183

VirusTotal Malware Code Injection Check memory unpack itself DNS 		1 2.8 M 12 ZeroCERT

6869 2021-04-02 11:06 last.sct  

a1269f636a62fc84b85d508244db0db5

VirusTotal Malware Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		4.4 M 13 ZeroCERT

6870 2021-04-02 11:38 boost-fps.exe  

92fc1129af30ba08a79113624f51bcb7


Malicious Packer Browser Info Stealer FTP Client Info Stealer VirusTotal Malware AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows Browser ComputerName Software crashed 		17 6 16 16.0 M 24 r0d

keyword