ScreenShot
| Created | 2023.07.12 07:48 | Machine | s1_win7_x6401 |
| Filename | setup.jpg | ||
| Type | Composite Document File V2 Document, Little Endian, Os: Windows, Version 6.3, MSI Installer, Last Pr | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | |||
| VT API (file) | 33 detected (Bulz, VBScript, VMProtect, Save, Eldorado, multiple detections, PurpleFox, Doina, CLASSIC, XPACK, Packed2, FUPORFLEX, SMYEBDR, GenericRXOX, VMProtBad, Phonzy, many, Detected, ai score=89, BScope, Agentb, susgen, ZedlaF, @J7@auIQWXd) | ||
| md5 | 20bec50362e877fa5935cb1fc67012f9 | ||
| sha256 | dbf87a5fcbfb1c8fd567e3c7a2103e63ad62422a0cc7d1ea64a265364ecfb3ba | ||
| ssdeep | 49152:QQvlrXVVdWX59GUrSLzeaVtFU2e2PfqZ2jQbfcOQHe1i+aW3NAWt6x7JjhS4V+s0:BlQFrEZHY7LE+x0VV+s0qMr | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (1cnts)
| Level | Description |
|---|---|
| danger | File has been identified by 33 AntiVirus engines on VirusTotal as malicious |
Rules (6cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| warning | Generic_Malware_Zero | Generic Malware | binaries (upload) |
| watch | Antivirus | Contains references to security software | binaries (upload) |
| watch | Malicious_Library_Zero | Malicious_Library | binaries (upload) |
| info | CAB_file_format | CAB archive file | binaries (upload) |
| info | Microsoft_Office_File_Zero | Microsoft Office File | binaries (upload) |
| info | OS_Processor_Check_Zero | OS Processor Check | binaries (upload) |
Network (0cnts) ?
| Request | CC | ASN Co | IP4 | Rule ? | ZERO ? |
|---|