Report - bypass.txt.ps1

ScreenShot
Created 2021.09.06 12:02 Machine s1_win7_x6403
Filename bypass.txt.ps1
Type ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
0.6
ZERO API file : mailcious
VT API (file) 1 detected (Wacatac)
md5 9a5efb3abce6346200b089761fff1688
sha256 ae382b4e4c77dd9da90d7783a4c03df28d0f9608a4311da9102baef256eabbdf
ssdeep 96:g2+dz8qVsVulmO7UIO1mWO7UI3myA2+rz42+Jz2CHDuCXDWVsMJVqv3BDukLZzOd:IWAmVdJVWlukBOdwW+zq/SIQIA7Zc
imphash
impfuzzy
  Network IP location

Signature (2cnts)

Level Description
notice File has been identified by one AntiVirus engine on VirusTotal as malicious
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure