Report - 9d8aa271.png

MSOffice File
ScreenShot
Created 2021.06.24 20:21 Machine s1_win7_x6401
Filename 9d8aa271.png
Type Composite Document File V2 Document, Little Endian, Os: Windows, Version 10.0, MSI Installer, Last P
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file) 34 detected (Bulz, Agentb, Convagent, Save, ESOV, Attribute, HighConfidence, multiple detections, NOON, UHBAZCLOC, kkyd, Black, ivcpha, Ajbu, Packed2, R002C0PFG21, VMProtect, lwxir, ASMalwS, kcloud, Tiggre, PurpleFox, Malicious, score, ZedlaF, rG4@aWpFvhd, ai score=87, TScope, CLASSIC, PossibleThreat)
md5 7a72d5e6044805ea4d2f37bdbdc0ab2d
sha256 34159049a92a5849bc9c11bd8ed4411aa5f5ecac4a80ddc2cc9f5df22980c1ec
ssdeep 24576:KUuDXXNGj04BMeRocDP1Nz4lDhkPTG4Mcgiwkew8vroUQGDXDNSnf6BlMRUT:KdXdJi5oo+FeBRSw8vlQIzNSnf6y4
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
danger File has been identified by 34 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info Microsoft_Office_File_Zero Microsoft Office File binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure