Report - 0BC8EC41.moe

Gen2
ScreenShot
Created 2021.04.01 18:22 Machine s1_win7_x6401
Filename 0BC8EC41.moe
Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last P
AI Score Not founds Behavior Score
1.2
ZERO API file : clean
VT API (file) 41 detected (GenericKD, Perkiler, Artemis, Delf, Save, Threats, InArchive, Eldorado, multiple detections, BCLH, Malicious, score, hmymnc, PurpleFox, CLASSIC, Malware@#2po5thwce7m33, NtRootKit, VMProtBad, pvour, kcloud, Yantai, Wacatac, BScope, Gencirc, ai score=94, ZedlaF, @V7@aCrr@Ah, HgAASQ8A)
md5 bde37153b7f4e860adba6bbdf91220e5
sha256 5ef702036c5c3aa2d0b6d8650e20b2c5f55776c69eebf8c700f1770b56a35c35
ssdeep 49152:2WHZBWVq9qVvReQ9IOsPOyHxGNzmv9NcHaTorKMIJM:huReOIOsPOyRUeN+rKMgM
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
danger File has been identified by 41 AntiVirus engines on VirusTotal as malicious

Rules (2cnts)

Level Name Description Collection
info OS_Processor_Check_Zero OS Processor Check Signature Zero binaries (upload)
info Win32_Trojan_Gen_2_0904B0_Zero Win32 Trojan Gen binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure