Report - 6AfEa8G0W8NOtUh7hqFj

ZIP Format
ScreenShot
Created 2023.03.20 09:49 Machine s1_win7_x6401
Filename 6AfEa8G0W8NOtUh7hqFj
Type Zip archive data, at least v2.0 to extract
AI Score Not founds Behavior Score
0.8
ZERO API file : malware
VT API (file) 26 detected (Emotet, GenericKD, TrojanBanker, cmvx, Nekark, njyxx, Archive, Bomb, ai score=85, suspected of Archive, MailBomb, SwollenFile, CLASSIC, GenKryptik, GHTL)
md5 81e7b43089fc2460934c00a12afdbf94
sha256 8c9cd553e7af6778e948c2f9a4ab9891a3589f0510ea45df2d8c8051a0c70866
ssdeep 6144:XA/fqQLsh2uoOObj+gmM424czDPECwRAc7cDA08yuMol3K:w/fqmm2sObC7ezET7vh73K
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
warning File has been identified by 26 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure