Report - cruz_image.mp3.html

Antivirus
ScreenShot
Created 2021.11.07 09:45 Machine s1_win7_x6402
Filename cruz_image.mp3.html
Type HTML document, ASCII text, with very long lines
AI Score Not founds Behavior Score
1.2
ZERO API file : clean
VT API (file) 15 detected (Valyria, Attribute, HighConfidence, Runner, SAgent, ai score=81, Asthma)
md5 a7ecdee268d12efae0f5cacc6ac5418b
sha256 6c8d40835df7806e334ba9db420495a40f3da826cf95e779f1cb5461ea4e9e08
ssdeep 3072:AoBqIwGni/RKSQ1Md+GDWzoIgUmSG+DlHkK5sdOu+j7Wkk:AoBqsi/RK2dzRIgUXJDZh5WOu+GB
imphash
impfuzzy
  Network IP location

Signature (3cnts)

Level Description
watch File has been identified by 15 AntiVirus engines on VirusTotal as malicious
notice Allocates read-write-execute memory (usually to unpack itself)
info One or more processes crashed

Rules (1cnts)

Level Name Description Collection
watch Antivirus Contains references to security software binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure