ScreenShot
| Created | 2023.05.16 15:55 | Machine | s1_win7_x6402 |
| Filename | 5.26행사일정표.hwp.lnk | ||
| Type | MS Windows shortcut, Has Description string, Has command line arguments, Icon number=1, ctime=Sun De | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | file : clean | ||
| VT API (file) | 25 detected (LNK/ABRisk.CTKX-4, Trojan.Gen.NPE.C, Troj/LnkDrop-M, Heur.BZC.YAX.Boxter.949.978B3956, HEUR:Trojan.WinLNK.Powecod.c, Other:Malware-gen [Trj, Dropper/LNK.Agent, Trojan.Link.Crafted, Malicious (score: 99), Static AI - Suspicious LNK, Detected, LNK/TrojanDropper.Agent.DD, Trojan.Agent.LNK.Gen, malware (ai score=99), LNK/Drop.Agent.VPVF, Win32.Trojan.Powecod.Jcnw, Trojan:Script/Woreflint.A!cl, Malware.LNK/Drop.Agent.VPVF, Heur.BZC.YAX.Boxter.949.978B3956 (B)) | ||
| md5 | 74e3d84492845067a0da6cfa00c064eb | ||
| sha256 | f17ade8c0251c018ab291aa79c9837799ce654418088466933d45cd216fa8948 | ||
| ssdeep | 384:ToyDFuieMyIEZLc+nSlgrNQg4S7ug0gWgDLiZI:ToRMCZo+nEgrcu9Cm | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (0cnts)
| Level | Description |
|---|
Rules (4cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| warning | Generic_Malware_Zero | Generic Malware | binaries (upload) |
| info | HWP_file_format | HWP Document File | binaries (upload) |
| info | Lnk_Format_Zero | LNK Format | binaries (upload) |
| info | Microsoft_Office_File_Zero | Microsoft Office File | binaries (upload) |
Network (0cnts) ?
| Request | CC | ASN Co | IP4 | Rule ? | ZERO ? |
|---|