popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7306 2021-04-16 10:06 orr7-10.exe  

0fc5f7aa1cb8fe99a341fbcb61e453da


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName Cryptographic key 		8.0 M 35 ZeroCERT

7307 2021-04-16 10:07 xxxx9-09.exe  

437c33588f8d349c2875e0e537cdecaf


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		8.2 M 32 ZeroCERT

7308 2021-04-16 10:09 xxxx9-10.exe  

36df7b55afe102a9359a270f8a38083d


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Cryptographic key 		8.0 M 30 ZeroCERT

7309 2021-04-16 10:10 orr7.exe  

3e79bddc425da8d5bb1eb87f6721bfa6


Azorult .NET framework AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		10.8 M 18 ZeroCERT

7310 2021-04-16 10:14 vbc.exe  

fb861097be51a4c1f963c83f6d6053fb

FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Checks debugger buffers extracted unpack itself Remote Code Execution DNS 		26 25 1 20 9.0 M 42 ZeroCERT

7311 2021-04-16 14:59 vbc.exe  

fb861097be51a4c1f963c83f6d6053fb


Generic Malware VirusTotal Malware suspicious privilege Code Injection Checks debugger buffers extracted unpack itself Remote Code Execution 		7.2 M 44 r0d

7312 2021-04-16 18:03 orr7-02.exe  

c1a7b6180d5dc3ab24df1d3a2a5532b9


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		11.6 M 20 ZeroCERT

7313 2021-04-16 18:04 winsdk.exe  

35ab7b989418f63d814895500fe6617b


Process Kill FindFirstVolume CryptGenKey VirusTotal Cryptocurrency Miner Malware Cryptocurrency suspicious privilege Check memory Checks debugger Creates executable files unpack itself Windows utilities suspicious process AppData folder suspicious TLD WriteConsoleW Tofsee Windows Tor ComputerName DNS 		1 9 8 6.6 M 30 ZeroCERT

7314 2021-04-16 18:06 orr7-03.exe  

3e79bddc425da8d5bb1eb87f6721bfa6


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows utilities suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		10.8 M 18 ZeroCERT

7315 2021-04-16 18:07 file.txt  

1f130569a8373dfae4f387d4757769cf


AsyncRAT backdoor Browser Info Stealer Malware download VirusTotal Malware IoC PDB suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI ICMP traffic unpack itself Windows utilities Collect installed applications suspicious process AntiVM_Disk suspicious TLD sandbox evasion VM Disk Size Check installed browsers check DiamondFox Windows Browser ComputerName Trojan DNS crashed 		6 4 5 15.4 M 14 ZeroCERT

7316 2021-04-16 18:08 TinyTake_v_5_2_19.exe  

6f6ef1b4659a3e4724c20f551541161b


VMProtect VirusTotal Malware Checks debugger ICMP traffic unpack itself DNS 		2 5.6 M 13 ZeroCERT

7317 2021-04-16 18:08 xxxx9-02.exe  

4071c5e2f3e94a1276801d76c124b186


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger unpack itself Windows DNS Cryptographic key crashed 		5.8 M 17 ZeroCERT

7318 2021-04-16 18:10 winlog.exe  

e4c965e4ab3053c66ac8873a17935202


Glupteba VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		2.8 M 20 ZeroCERT

7319 2021-04-16 18:12 wealthsecx.exe  

412968efeaa2cb9312bd12f20b0938e7


AsyncRAT backdoor Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows Browser Email ComputerName Cryptographic key Software crashed keylogger 		13.4 M 21 ZeroCERT

7320 2021-04-16 18:51 46911997163.exe  

66e25d4c12fb491e0a5c5b8dcd9fa85a

Vulnerability VirusTotal Malware MachineGuid Check memory Checks debugger Creates shortcut unpack itself AntiVM_Disk VM Disk Size Check human activity check 		4.4 M 18 ZeroCERT

keyword