Report - Wyciek-NFZ-16-03-2023.xlsx

ZIP Format
ScreenShot
Created 2023.03.27 11:27 Machine s1_win7_x6402
Filename Wyciek-NFZ-16-03-2023.xlsx
Type Microsoft Excel 2007+
AI Score Not founds Behavior Score
1.8
ZERO API file : malware
VT API (file)
md5 67126c10471b06d8a5b86d78bd6052f4
sha256 b1a696a48c2238c1edc19b505f50edcedc73bad4a6e6fb6ca1d4cd5a0649200a
ssdeep 384:KXIehAXMdQAntKW25QpuS9lOpPLJ8WlcEbe19SrAkzpy990wLg+buxUhPdgQS0:chPdPtKWTpXmJ8OcvWrj9y0C3SUheQ1
imphash
impfuzzy
  Network IP location

Signature (5cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice An application raised an exception which may be indicative of an exploit crash
notice Creates (office) documents on the filesystem
notice Creates hidden or system file
info One or more processes crashed

Rules (1cnts)

Level Name Description Collection
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure