Report - unknown.exe

RAT UPX Malicious Library Malicious Packer PE File
ScreenShot
Created 2023.04.14 09:31 Machine s1_win7_x6403
Filename unknown.exe
Type MS-DOS executable
AI Score Not founds Behavior Score
0.0
ZERO API file : clean
VT API (file)
md5 ceab7da20b9fa2398c0c27e6398e7c84
sha256 0adcdce714ea519bbad5aedb6c5e458d70944056424a42846e7235e14cf87894
ssdeep 768:pxpWKqBQMDykjFk0b48UqChHP8eaX7CNaklm+Xm5BMWeD5oJJ6:pxAPi+ysk0d2VP+Liak5lnloJJ6
imphash
impfuzzy
  Network IP location

Signature (0cnts)

Level Description

Rules (5cnts)

Level Name Description Collection
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch Malicious_Packer_Zero Malicious Packer binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)
info Win_Backdoor_AsyncRAT_Zero Win Backdoor AsyncRAT binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure