popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
7981 2021-05-12 10:05 client1122.exe  

7bf8da9ae283c60e226852fee7ad3d94


AsyncRAT backdoor .NET EXE PE File PE32 GIF Format VirusTotal Malware AutoRuns suspicious privilege Check memory Checks debugger WMI Creates shortcut Creates executable files unpack itself Windows utilities suspicious process AppData folder AntiVM_Disk WriteConsoleW Firewall state off VM Disk Size Check Ransomware Windows ComputerName DNS crashed 		14.6 M 51 ZeroCERT

7982 2021-05-12 10:06 document.txt  

efc7d9d7dc23103bf17976ebdb444aa6


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		2 2 1 2 3.8 M 30 ZeroCERT

7983 2021-05-12 10:08 RFQ ARN-PO-2020-11-00073 MINE....  

ef7d61928153c7ac6dc3d692e9c42fcc

VirusTotal Malware exploit crash unpack itself Exploit DNS crashed 		1 4.2 27 ZeroCERT

7984 2021-05-12 10:12 slot Charges.exe  

5830b69895c4f5b70d2f5c94cd718fa6


PE File PE32 DLL FormBook Malware download VirusTotal Malware suspicious privilege Malicious Traffic Check memory Creates executable files unpack itself AppData folder 		10 16 1 6.0 40 ZeroCERT

7985 2021-05-12 10:13 Fattura_01120879.xlsm  

5bcdab4ff6b87ec09850a81bb992a58f


VBA_macro VirusTotal Malware unpack itself DNS 		2.4 11 ZeroCERT

7986 2021-05-12 10:17 driverrom.exe  

3797a11eaffd59ce06f191120eac881b


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 2 1 1 3.8 M 38 ZeroCERT

7987 2021-05-12 10:17 stkara.txt  

86ab74265ed0cac9e9978bb2d4d6efee


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key 		2 2 1 2 3.6 M 41 ZeroCERT

7988 2021-05-12 10:19 stoniko.txt  

e085bf8e3657e12192d0932da7855217


AsyncRAT backdoor Antivirus .NET EXE PE File PE32 VirusTotal Malware powershell suspicious privilege Code Injection Check memory Checks debugger Creates shortcut Creates executable files unpack itself Windows utilities Disables Windows Security powershell.exe wrote suspicious process AppData folder sandbox evasion WriteConsoleW Windows ComputerName DNS Cryptographic key 		11.0 M 18 ZeroCERT

7989 2021-05-12 10:20 silenthill.txt  

b84fafbb835c20e62de5a658cf6dc0c1


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces Windows ComputerName DNS Cryptographic key 		7 2 1 7 3.2 M 28 ZeroCERT

7990 2021-05-12 10:22 bella.txt  

c6b9737dd5705a2ac1920c5cbac89abf


AgentTesla Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downloader P2P persistence AntiDebug AntiVM PE File PE32 OS Proc VirusTotal Malware Buffer PE AutoRuns Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder malicious URLs AntiVM_Disk WriteConsoleW VM Disk Size Check Windows ComputerName crashed 		1 12.4 M 37 ZeroCERT

7991 2021-05-12 10:27 racopp.txt  

a73349885f36cdef7315984ad948a1ab


PWS .NET framework Gen1 Gen2 Http API Steal credential ScreenShot AntiDebug AntiVM .NET EXE PE File PE32 DLL OS Processor Check JPEG Format VirusTotal Email Client Info Stealer Malware MachineGuid Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates executable files ICMP traffic unpack itself Collect installed applications AppData folder suspicious TLD installed browsers check Tofsee Ransomware Windows Browser Email ComputerName DNS Cryptographic key crashed 		7 5 4 14.6 M 46 ZeroCERT

7992 2021-05-12 12:07 vbc.exe  

fcbe097d79c7051e75b2e5049bef5999


PWS .NET framework Malicious Library AntiDebug AntiVM .NET EXE PE File PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted unpack itself Windows DNS Cryptographic key crashed 		9.2 M 21 ZeroCERT

7993 2021-05-12 12:08 w2mobi.txt  

20faf56c053933d409a50e202c45a633


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 2 1 1 3.2 M 30 ZeroCERT

7994 2021-05-12 12:09 Driveradamson.exe  

ccc7803389733e45ce179ae208242269


AgentTesla AsyncRAT backdoor PWS .NET framework Malicious Library Antivirus Sniff Audio KeyLogger ScreenShot DGA DNS Socket Create Service HTTP Escalate priviledges FTP Code injection Http API Internet API Steal credential Downloader P2P AntiDebug AntiVM VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote suspicious process WriteConsoleW Windows ComputerName DNS Cryptographic key 		15.2 M 46 ZeroCERT

7995 2021-05-12 12:10 loadvict.txt  

fa2cb0991ac0fb9b2271c41fd7847d03


AsyncRAT backdoor .NET EXE PE File PE32 VirusTotal Malware Malicious Traffic Check memory Checks debugger unpack itself Check virtual network interfaces ComputerName DNS 		1 2 1 1 3.2 M 31 ZeroCERT

keyword