popup

Report - paladin.hta

  1. Resubmit analysis
  2. Detailed report
ScreenShot
Created 2023.04.18 09:48 Machine s1_win7_x6403
Filename paladin.hta
Type HTML document, ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file) 21 detected (Kryptik, Electryon, Dinihou, dnzdga, Fwnw, Detected, suspected of VBS, EncodedMalware, TOPIS, SBSejaxyQZM, ai score=80)
md5 1788bf59ef4448b60cab56c45cc7cafe
sha256 eebd45700e2ffa98b0ea01f901f7f03171d6b0142fdd4556352a6707ad3d7d98
ssdeep 1536:/PWANsp5+k/gR8MftoLTrjR8qeMKhfhW6QSqUjMdk/HyXX:/PWxD+2gbto/r98qIhW6QSqUjMm/HyXX
imphash
impfuzzy
  Network IP location

Signature (2cnts)

Level Description
warning File has been identified by 21 AntiVirus engines on VirusTotal as malicious
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids


Similarity measure (PE file only) - Checking for service failure