Category | Machine | Started | Completed |
---|---|---|---|
FILE | s1_win7_x6401 | Sept. 19, 2023, 7:46 p.m. | Sept. 19, 2023, 7:47 p.m. |
Name | Response | Post-Analysis Lookup |
---|---|---|
No hosts contacted. |
IP Address | Status | Action |
---|---|---|
No hosts contacted. |
Suricata Alerts
No Suricata Alerts
Suricata TLS
No Suricata TLS
Bkav | W32.AIDetectMalware.64 |
Elastic | malicious (moderate confidence) |
CrowdStrike | win/malicious_confidence_60% (D) |
ESET-NOD32 | a variant of Win64/ReverseShell.BY |
Cynet | Malicious (score: 100) |
McAfee-GW-Edition | BehavesLike.Win64.DocumentCrypt.pc |
AhnLab-V3 | Trojan/Win.Generic.C5475757 |
DeepInstinct | MALICIOUS |
section | {u'size_of_data': u'0x0000aa00', u'virtual_address': u'0x00013000', u'entropy': 7.8701655123390095, u'name': u'UPX1', u'virtual_size': u'0x0000b000'} | entropy | 7.87016551234 | description | A section with a high entropy has been found | |||||||||
entropy | 0.977011494253 | description | Overall entropy of this PE file is high |
section | UPX0 | description | Section name indicates UPX | ||||||
section | UPX1 | description | Section name indicates UPX |