Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7066 2021-04-08 18:08 xxxlss-01.exe  

077e3ce60c1e587de33f62a1b6abcc19


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key
8.6 M 30 ZeroCERT

7067 2021-04-08 18:08 Dianthus.exe  

77dfc735d37c3f44ab13d253ccd5417c


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces suspicious TLD installed browsers check Windows Browser ComputerName Cryptographic key crashed
3 6 11.2 M 33 ZeroCERT

7068 2021-04-08 18:09 updachrome.exe  

2295742285186ecb7ff7c4634d31bdc8


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces malicious URLs installed browsers check Windows Browser ComputerName Cryptographic key Software crashed
2 10 12.4 M 32 ZeroCERT

7069 2021-04-08 18:09 winlog.exe  

1db39e128ada4c68357664c1b44c0e84


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key
6 9 10.4 M 15 ZeroCERT

7070 2021-04-08 18:09 n.exe  

7e7012645cc3d6d3572bb01891fbcec1


Malicious Library VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS
1 3 11.6 M 28 ZeroCERT

7071 2021-04-08 18:13 win32.exe  

5d8702803555ff684424ebd13eda9f47

VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files ICMP traffic unpack itself AppData folder DNS
22 27 6.0 M 13 ZeroCERT

7072 2021-04-08 18:25 zuc.exe  

c515efd0a5cacf6b47508b6954d67ce2

VirusTotal Malware
1.4 M 16 ZeroCERT

7073 2021-04-08 18:26 newred.exe  

7b640bae01407187610ba076d5509628


AsyncRAT backdoor Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed
2 3 11.2 M 20 ZeroCERT

7074 2021-04-08 18:26 test.exe  

17a490db01806e788407ec152760e5b8


Azorult .NET framework AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Collect installed applications Check virtual network interfaces installed browsers check Windows Browser ComputerName DNS Cryptographic key Software crashed
2 3 12.0 M 22 ZeroCERT

7075 2021-04-08 18:26 serv.exe  

6df7008811f88eeb253064a99c79f234


Gen1 VirusTotal Malware Checks debugger Creates shortcut Creates executable files unpack itself suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Browser ComputerName DNS
6.0 M 40 ZeroCERT

7076 2021-04-08 18:26 win32.exe  

bd7e988ed1d92f9faf32f6a817d89329


Azorult .NET framework VirusTotal Malware Malicious Traffic Check memory Checks debugger ICMP traffic unpack itself Windows Cryptographic key
6 8 4.0 M 17 ZeroCERT

7077 2021-04-08 18:27 ZendEngine.png  

3ecd104ed0eec4ec47a19a3436960fa9

VirusTotal Malware
0.4 M 5 ZeroCERT

7078 2021-04-08 18:27 updatedata.exe  

1e949d5238fbf2ade45c91bb54de22ea

VirusTotal Malware DNS crashed
2.2 M 27 ZeroCERT

7079 2021-04-08 18:28 winlog.exe  

2c64897aa30694cc768f5ea375157932

VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities AppData folder Windows DNS
24 26 6 7.0 M 18 ZeroCERT

7080 2021-04-08 18:30 file.exe  

d381b0a2268051aa83b031ddc87ee7df


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key
1 8.0 M 24 ZeroCERT