popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7171 2021-04-13 07:43 https://www.websii.org/  

4d37d041156239b1c144576d90d31196


Code Injection RWX flags setting exploit crash unpack itself Windows utilities Windows Exploit DNS crashed 		2 3.8 ZeroCERT

7172 2021-04-13 09:05 winlog.exe  

2c64897aa30694cc768f5ea375157932


VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder 		1 4.0 M 43 ZeroCERT

7173 2021-04-13 09:05 svchost.exe  

7abd2b01e05d9e9b2eca7281d1c7270c


Azorult .NET framework Antivirus AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself suspicious process Windows ComputerName DNS Cryptographic key 		1 10.4 10 ZeroCERT

7174 2021-04-13 09:06 vbn.exe  

48421b088e267cfe8bcecfd5adfdf477


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key crashed 		9.0 M 28 ZeroCERT

7175 2021-04-13 09:08 oregs-0.exe  

127ae40009368fb03554057f1bf860a0


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.4 17 ZeroCERT

7176 2021-04-13 09:08 xles-0.exe  

396071cf13f858e6677a6655a2d173bb


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		7.2 17 ZeroCERT

7177 2021-04-13 09:10 5uwl_cqfirm2code090407.rar  

f0857d74be2810cd443101e4e2cb9eea

VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself DNS 		2.8 14 ZeroCERT

7178 2021-04-13 09:10 xles.exe  

6a6f860db6a64c09af20eea7444fe628


Azorult .NET framework Antivirus AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.0 9 ZeroCERT

7179 2021-04-13 09:12 winlog.exe  

2c64897aa30694cc768f5ea375157932

VirusTotal Malware suspicious privilege Check memory Checks debugger Creates executable files unpack itself AppData folder DNS 		4.6 M 43 ZeroCERT

7180 2021-04-13 09:15 oregs.exe  

2a39c7e2a2d9ed686e08dd32483f5ed4


Azorult .NET framework Antivirus AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.2 8 ZeroCERT

7181 2021-04-13 09:15 tk.exe  

b23af6c6f1a909df7d67de1e4c2aaa8c


Antivirus Browser Info Stealer VirusTotal Email Client Info Stealer Malware powershell AutoRuns PDB suspicious privilege MachineGuid Code Injection Check memory Checks debugger buffers extracted WMI Creates shortcut Creates executable files unpack itself powershell.exe wrote suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check human activity check installed browsers check Windows Browser Email ComputerName DNS Cryptographic key crashed 		1 12.6 28 ZeroCERT

7182 2021-04-13 09:19 vbc.exe  

688a80f956364e2d3937b973c41cfbb6

VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted ICMP traffic unpack itself Remote Code Execution DNS 		22 26 8 9.4 M 28 ZeroCERT

7183 2021-04-13 09:19 1604Quas.exe  

273f5e4f66fd1e84a6aff459299a09dd


AsyncRAT backdoor VirusTotal Malware MachineGuid Check memory Checks debugger unpack itself DNS 		3.8 47 ZeroCERT

7184 2021-04-13 09:19 p33.exe  

29389832e538957dc769cf709f80144a


Gen2 Gen1 Browser Info Stealer VirusTotal Malware suspicious privilege MachineGuid Check memory Checks debugger WMI Creates shortcut Creates executable files RWX flags setting unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW VM Disk Size Check installed browsers check Interception Windows Browser ComputerName DNS crashed 		14 8.8 52 ZeroCERT

7185 2021-04-13 09:23 .................................  

e70135cdb555ce99adee7df642813dcb

VirusTotal Malware Malicious Traffic exploit crash unpack itself Exploit DNS crashed 		29 30 10 4.4 M 23 ZeroCERT

keyword