wget.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6402 | Sept. 2, 2021, 11:09 a.m. | Sept. 2, 2021, 11:15 a.m. |
-
wget.exe "C:\Users\test22\AppData\Local\Temp\wget.exe"
568
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| CrowdStrike | win/malicious_confidence_80% (W) |
| APEX | Malicious |
| Cynet | Malicious (score: 100) |
| Sophos | Generic ML PUA (PUA) |
| McAfee-GW-Edition | BehavesLike.Win64.Trickbot.vc |
| FireEye | Generic.mg.a445cf765b601d2a |
| McAfee | Artemis!A445CF765B60 |
| section | {u'size_of_data': u'0x0020fa00', u'virtual_address': u'0x002cf000', u'entropy': 7.944117495143957, u'name': u'UPX1', u'virtual_size': u'0x00210000'} | entropy | 7.94411749514 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.999526403031 | description | Overall entropy of this PE file is high | |||||||||||
| section | UPX0 | description | Section name indicates UPX | ||||||
| section | UPX1 | description | Section name indicates UPX | ||||||
| section | UPX2 | description | Section name indicates UPX | ||||||