Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6402 | June 24, 2021, 9:14 a.m. | June 24, 2021, 9:42 a.m. |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
172.217.25.14 | Active | Moloch |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
host | 172.217.25.14 |
Bkav | W32.AIDetect.malware2 |
Elastic | malicious (high confidence) |
Cylance | Unsafe |
Sangfor | Trojan.Win32.Save.a |
APEX | Malicious |
Kaspersky | UDS:DangerousObject.Multi.Generic |
Paloalto | generic.ml |
McAfee-GW-Edition | BehavesLike.Win32.Trojan.ch |
FireEye | Generic.mg.4a97041b159dda76 |
SentinelOne | Static AI - Suspicious PE |
Microsoft | Program:Win32/Wacapew.C!ml |
McAfee | Artemis!4A97041B159D |
BitDefenderTheta | Gen:NN.ZevbaF.34758.im0@aCHb4ili |
CrowdStrike | win/malicious_confidence_100% (W) |