Report - assistant.php.ps1

Generic Malware Antivirus
ScreenShot
Created 2021.09.02 18:14 Machine s1_win7_x6403
Filename assistant.php.ps1
Type empty
AI Score Not founds Behavior Score
0.4
ZERO API file : clean
VT API (file)
md5 d41d8cd98f00b204e9800998ecf8427e
sha256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
ssdeep 3::
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)

Rules (2cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (download)
watch Antivirus Contains references to security software binaries (download)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure