Clip1.exe| Category | Machine | Started | Completed |
|---|---|---|---|
| FILE | s1_win7_x6403_us | Dec. 20, 2022, 11:48 a.m. | Dec. 20, 2022, 11:50 a.m. |
| Name | Response | Post-Analysis Lookup |
|---|---|---|
| No hosts contacted. | ||
| IP Address | Status | Action |
|---|---|---|
| No hosts contacted. | ||
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
| section | D#&A$FBZ |
| section | D)%&(X$U |
| section | OS__)Q^& |
| section | $TEWRGFS |
| section | Q$MLW^#N |
| section | FTJ(IEAN |
| section | AY^^U%IQ |
| section | {u'size_of_data': u'0x00566600', u'virtual_address': u'0x00610000', u'entropy': 7.905235363271967, u'name': u'$TEWRGFS', u'virtual_size': u'0x00566518'} | entropy | 7.90523536327 | description | A section with a high entropy has been found | |||||||||
| entropy | 0.999367431773 | description | Overall entropy of this PE file is high | |||||||||||
| Elastic | malicious (high confidence) |
| Cylance | Unsafe |
| Cybereason | malicious.912e40 |
| Symantec | ML.Attribute.HighConfidence |
| tehtris | Generic.Malware |
| APEX | Malicious |
| McAfee-GW-Edition | BehavesLike.Win64.Trickbot.tc |
| Trapmine | suspicious.low.ml.score |
| FireEye | Generic.mg.08e7e0da767d6c6a |
| Sophos | Generic ML PUA (PUA) |
| Gridinsoft | Trojan.Heur!.03212023 |
| Microsoft | Trojan:Win32/Sabsik.FL.B!ml |
| Cynet | Malicious (score: 100) |
| Acronis | suspicious |
| SentinelOne | Static AI - Suspicious PE |
| MaxSecure | Trojan.Malware.300983.susgen |