popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7141 2021-04-12 08:04 chrome_elf.dll  

98e44115d6f4faaa25524d66776c4eb7


VirusTotal Malware AutoRuns Check memory Checks debugger RWX flags setting unpack itself AntiVM_Disk sandbox evasion VM Disk Size Check Windows Browser Remote Code Execution DNS 		1 5.6 18 ZeroCERT

7142 2021-04-12 10:11 1.dotm  

33aaf4c68958e89ce690265369e151d6


VirusTotal Malware Code Injection unpack itself DNS 		2 1 5.6 M 36 ZeroCERT

7143 2021-04-12 10:42 delete.exe  

fca72b6de6d5d9eeab811974eb6a1dbc


Cryptocurrency Miner Cryptocurrency PDB suspicious privilege Code Injection Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution DNS crashed 		8.0 M ZeroCERT

7144 2021-04-12 10:44 delete.exe  

fca72b6de6d5d9eeab811974eb6a1dbc


Cryptocurrency Miner Cryptocurrency PDB suspicious privilege Code Injection Checks debugger WMI Creates executable files unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Remote Code Execution DNS crashed 		1 8.0 M ZeroCERT

7145 2021-04-12 10:44 mazx.exe  

a7f014f4fe566e48e794b79661aef18e


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		3 2 3 4.0 M 55 ZeroCERT

7146 2021-04-12 10:47 aXSz3.exe  

6f504e4d2887038775a8636d246f38a1


Antivirus Browser Info Stealer FTP Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency powershell suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AppData folder sandbox evasion WriteConsoleW installed browsers check Interception Windows Browser ComputerName DNS Cryptographic key Software 		2 3 17.0 M ZeroCERT

7147 2021-04-12 10:48 yugox.exe  

367efadcea9adefd0ac04eda7446736a


AsyncRAT backdoor Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		3 2 3 2.2 M ZeroCERT

7148 2021-04-12 10:49 32a1.com  

ec052b150b112e80d0bfb4b8d0ff8eb9

AutoRuns PDB Check memory Creates executable files unpack itself Check virtual network interfaces WriteConsoleW Windows Remote Code Execution Firmware DNS 		2 5.6 M ZeroCERT

7149 2021-04-12 10:51 brasch.exe  

d035bf4abd2cebd5d851b425e02d9e83


Loki Azorult .NET framework AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself malicious URLs installed browsers check Windows Browser Email ComputerName Cryptographic key Software crashed 		1 2 1 13.0 M 51 ZeroCERT

7150 2021-04-12 10:52 64a1.com  

829c8b46d2fcfbcb7f5c2e3545a4c4a3


Antivirus VirusTotal Malware AutoRuns PDB Check memory Creates executable files unpack itself Auto service Check virtual network interfaces sandbox evasion Windows Browser ComputerName Remote Code Execution Firmware DNS 		2 8.2 M 40 ZeroCERT

7151 2021-04-12 10:53 aguerox.exe  

99b84053fd2d502626a1f78394fbf8f2


AsyncRAT backdoor VirusTotal Malware 		1 1.2 M 46 ZeroCERT

7152 2021-04-12 10:56 Echelon_protected.exe  

4f96ba78b8078180158c591099449438

Browser Info Stealer FTP Client Info Stealer Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Checks Bios Collect installed applications Detects VMWare Check virtual network interfaces VMware anti-virtualization IP Check installed browsers check Windows Browser Email ComputerName Firmware Cryptographic key Software crashed 		10 8 12.0 M ZeroCERT

7153 2021-04-12 10:57 mbachux.exe  

eb00c33045168dfd28843d22e8038269


AsyncRAT backdoor VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName 		3 2 3 3.4 M 48 ZeroCERT

7154 2021-04-12 10:57 DCRatBuild.exe  

775b36643d8ded334c9411920713a711


AsyncRAT backdoor VirusTotal Malware AutoRuns PDB suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger Creates executable files unpack itself Windows utilities Check virtual network interfaces suspicious process WriteConsoleW IP Check Windows ComputerName Remote Code Execution DNS crashed 		5 5 12.6 M 43 ZeroCERT

7155 2021-04-12 10:58 tai1.exe  

83a82cacf8a42eb833b95c0985095457

Browser Info Stealer FTP Client Info Stealer VirusTotal Malware Cryptocurrency wallets Cryptocurrency Malicious Traffic unpack itself sandbox evasion installed browsers check Interception Browser DNS Software 		1 2 6.8 M 49 ZeroCERT

keyword