ScreenShot
Created 2021.07.02 16:11 Machine s1_win7_x6402
Filename 1.txt.html
Type HTML document, ASCII text, with CRLF line terminators
AI Score Not founds Behavior Score
1.4
ZERO API file : clean
VT API (file) 14 detected (Electryon, gen48, ai score=84, powershell)
md5 09ba0c56fdd1465b2d048d38a645775e
sha256 437ad33cb6417a207b184f852f467b7b070035a296ba2c947494f4bc7d931fa8
ssdeep 12:M6Qclfh3D5LW+3q/ohnI80Qpcn98mOjK6LoGZffehpg5IYAHpcIijprBYMSoXtXW:Msp1C+3qgBEqK6LrZffeh9ijpFYMXtXW
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
watch Communicates with host for which no DNS query was performed
watch File has been identified by 14 AntiVirus engines on VirusTotal as malicious
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure