NyMaim

NyMaim is a malware with various capabilities written in C++ and first seen in 2013.

Process spawned unexpected child process

This typically indicates the parent process was compromised via an exploit or macro.

RedLine

RedLine Stealer is a malware family written in C#, first appearing in early 2020.

RedLine payload

Downloads MZ/PE file

Drops file in Drivers directory

Executes dropped EXE

VMProtect packed file

Detects executables packed with VMProtect commercial packer.