No | Date | Request | Urls | Hosts | IDS | Rule | Score | Zero | VT | Player | Etc | |||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
1 | 2022-08-26 17:28 |
![]() 10cc003a69a348849797e27eb11d74eaPWS[m] NPKI Emotet RAT PWS .NET framework Generic Malware Downloader task schedule UPX Malicious Library Malicious Packer Antivirus Create Service DGA Socket ScreenShot DNS Internet API Code injection Sniff Audio HTTP Steal credential KeyLogger P2P Es VirusTotal Malware powershell AutoRuns suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted Creates shortcut Creates executable files unpack itself Windows utilities powershell.exe wrote Check virtual network interfaces suspicious process AntiVM_Disk WriteConsoleW VM Disk Size Check Tofsee Windows ComputerName RCE Cryptographic key |
7
|
6 | 1 | 4 | 11.6 | M | 22 | ZeroCERT | ||||||||||||||
|