ScreenShot
| Created | 2023.10.08 12:04 | Machine | s1_win7_x6401 |
| Filename | cafiii.jpg | ||
| Type | Zip archive data, at least v2.0 to extract | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | file : malware | ||
| VT API (file) | 23 detected (Kryptik, GenericKD, ABRisk, XPMM, multiple detections, PowerShell, TOPIS, 3hlG8fHXB1N, Artemis, ai score=87, Detected, Kcnw) | ||
| md5 | eb52f4c919c1466d334996cbc02f64ab | ||
| sha256 | f2254cee40cac5d924929dfb7978485b62e4b1328e1474fd5923e166038723ca | ||
| ssdeep | 768:YN5ooWY80unrrJhWCkPmDfdKChwGfuUQmoBDXPA9QyX6Rk2pDVRhhEYIME8BZq9V:NremLdP5sry4/xVPPcQjpz5BAonhU | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (3cnts)
| Level | Description |
|---|---|
| danger | Connects to an IP address that is no longer responding to requests (legitimate services will remain up-and-running usually) |
| warning | File has been identified by 23 AntiVirus engines on VirusTotal as malicious |
| watch | Communicates with host for which no DNS query was performed |
Rules (1cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| info | zip_file_format | ZIP file format | binaries (upload) |
