ScreenShot
Created 2023.04.26 09:29 Machine s1_win7_x6402
Filename B584.wsf
Type UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
AI Score Not founds Behavior Score
0.6
ZERO API file : clean
VT API (file)
md5 820327a123eb0f98dcb15bc713d49ecc
sha256 9b032588721041c44b8cd750170a5bc8ef10da5afa80a5bc5972e2bf6786fa52
ssdeep 1536:/49lDhrGjF3NlDhyjoY+7Y1aKXiiwuBg5t0PbcNpTbKL6WfrDt4ti2TnjltQls:/+lDc3NlDXYOuaKXUtKbcNu6WfHJ2Tn5
imphash
impfuzzy
  Network IP location

Signature (2cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure