popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7081 2021-04-08 18:32 xxxlss.exe  

3ee61e1613c898c3078dd7fdaa00b8af


Azorult .NET framework VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8.2 M 15 ZeroCERT

7082 2021-04-08 18:35 3.exe  

7c9068127d92ac8179b511617146a8d6


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces Windows DNS Cryptographic key 		1 11.4 M 24 ZeroCERT

7083 2021-04-08 19:43 ZenDEngine1.jpg  

12e23b234e6739b0148a172be65e665f

VirusTotal Malware DNS 		1.0 M 5 ZeroCERT

7084 2021-04-08 19:43 origg-01.exe  

133b4a863e9a9c74b7320f54abf199d7


Azorult .NET framework Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		2.0 M ZeroCERT

7085 2021-04-08 19:43 zender.txt  

5db24413257332efd03849b64f49b2c1


Antivirus Code Injection Check memory Creates executable files exploit crash unpack itself Windows utilities suspicious process Windows Exploit DNS crashed 		3 6.4 M 17 ZeroCERT

7086 2021-04-08 19:43 winlog.exe  

7b95e7c4b726fb678571f965327eb05c

Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 2 8.8 M ZeroCERT

7087 2021-04-08 19:44 SKM_C25832100083932157.exe  

67b98281009cbfdb96bfaec29243f173


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces DNS DDNS 		6 4 4 6.0 M 32 ZeroCERT

7088 2021-04-08 19:45 winlog.exe  

d074162909d26edf4001380da0ae4743

VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		4.2 M 22 ZeroCERT

7089 2021-04-08 19:45 2.exe  

a7e67e6abd539aeddbb9021d23f6f217


Azorult .NET framework Gen1 AsyncRAT backdoor Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities Collect installed applications Check virtual network interfaces suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Windows Browser ComputerName DNS Cryptographic key crashed 		10 12 17.0 M 40 ZeroCERT

7090 2021-04-08 19:49 winlog.exe  

3ee47ef2fed1383543fed2509ee9d533

VirusTotal Malware suspicious privilege Malicious Traffic Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		10 20 6 6.2 M 13 ZeroCERT

7091 2021-04-09 08:51 notabotnet.arc  

320b2d861c20714d4fed68bbc64d77c3

VirusTotal Email Client Info Stealer Malware suspicious privilege Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS 		5.0 13 ZeroCERT

7092 2021-04-09 08:55 lv.exe  

845615bf78874fa55758ce6fa4b36084


Glupteba Malicious Library VirusTotal Malware Code Injection Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows DNS crashed 		1 8.4 38 ZeroCERT

7093 2021-04-09 08:56 hkn.exe  

5f968f612f82f74c96dd257793cf917d


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName DNS Cryptographic key crashed 		9.6 24 ZeroCERT

7094 2021-04-09 08:58 file.exe  

3c541941aa60ce757626f3c7ef08ae6b


Raccoon Stealer Glupteba VirusTotal Malware PDB unpack itself Windows Remote Code Execution DNS crashed 		3.6 34 ZeroCERT

7095 2021-04-09 11:35 Six.exe  

1a50df3a388ce5778e33c2d994edeb7d

VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself 		1.8 M 28 ZeroCERT

keyword