popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7591 2021-04-26 18:06 regasm.exe  

0f41166bff09ec4b0c4491140da6951b


Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key 		9.0 M 18 ZeroCERT

7592 2021-04-26 18:09 win32.exe  

560e45ff31ce9ea0446afa5e85fb0f97


AsyncRAT backdoor VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows ComputerName Cryptographic key 		8.2 M 27 ZeroCERT

7593 2021-04-26 18:11 DFI_0451_587_032.pdf  

2e85f22e8e3436b38af2299a04f0cad8


AgentTesla KeyBase Keylogger malicious URLs ComputerName 		2 2.4 M ZeroCERT

7594 2021-04-26 18:12 win32.exe  

6fb264671c6043faa04905eb607b9b17


Malicious Library VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key 		1 7.8 13 ZeroCERT

7595 2021-04-26 18:12 IMG_608943011.pdf  

5f0e74e8c039c771ec8c2fa77981c7dd


AgentTesla KeyBase Keylogger Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 4 4 13.4 14 ZeroCERT

7596 2021-04-26 18:13 jazzyx.scr  

9016909878ac1ad68e35ec83aa6988d7


AsyncRAT backdoor FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key crashed 		4 9 2 9.4 17 ZeroCERT

7597 2021-04-26 18:14 shedyphx.scr  

65f19f528b41da6b1b11e894ed20d877


AsyncRAT backdoor FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows DNS Cryptographic key 		5 9 2 10.6 13 ZeroCERT

7598 2021-04-26 18:15 shedyx.scr  

a1bf6457c196da3311ec2bb5d6a3dd93


AsyncRAT backdoor FormBook Malware download VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces suspicious process WriteConsoleW Windows DNS Cryptographic key crashed 		4 9 2 9.2 14 ZeroCERT

7599 2021-04-26 18:19 regasm.exe  

4d1a1e438fee82fce40619bbb27f4209

Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege MachineGuid Check memory Creates executable files unpack itself AppData folder AntiVM_Disk VM Disk Size Check installed browsers check Browser Email ComputerName DNS Software 		1 1 8.2 M 21 ZeroCERT

7600 2021-04-26 18:20 regasm.exe  

d7a120c277d010f9757a22fab6cc6d29


Raccoon Stealer Glupteba VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.2 M 25 ZeroCERT

7601 2021-04-26 18:23 FLP_1037850047.pdf  

d32bc982566fbb8d81d3012779d3c320


AgentTesla KeyBase Keylogger Browser Info Stealer VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself malicious URLs Windows Browser ComputerName DNS Cryptographic key crashed 		1 9.0 M 11 ZeroCERT

7602 2021-04-26 18:27 IMG_5023075401.pdf  

427e21ef958ea63e6a12ce4d8d5a3e55


AgentTesla KeyBase Keylogger Browser Info Stealer FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Check virtual network interfaces malicious URLs IP Check Tofsee Windows Browser Email ComputerName DNS Cryptographic key DDNS Software crashed 		2 5 4 13.4 M 16 ZeroCERT

7603 2021-04-26 18:27 IMG_106_680_74_80.pdf  

e05e738dcb98a9f8c125138b492f82e5


AgentTesla KeyBase Keylogger Gen1 Browser Info Stealer Malware download Vidar VirusTotal Email Client Info Stealer Malware Cryptocurrency wallets Cryptocurrency suspicious privilege MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted WMI Creates executable files unpack itself Windows utilities Collect installed applications suspicious process AppData folder malicious URLs WriteConsoleW anti-virtualization installed browsers check OskiStealer Stealer Windows Browser Email ComputerName DNS Cryptographic key crashed Password 		9 2 7 17.0 M 13 ZeroCERT

7604 2021-04-27 07:34 zNxilDNA8KXhDwA.exe  

5570cf1f7f13401060e437441383b17f


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows Cryptographic key 		3.2 33 ZeroCERT

7605 2021-04-27 07:34 YJsq7ClO2MJYRAz.exe  

d99fa385d6238fb480c064c8785a0c83


PWS .NET framework Malicious Library AsyncRAT backdoor VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself Windows DNS Cryptographic key 		3.8 30 ZeroCERT

keyword