ScreenShot
Created 2023.10.16 11:16 Machine s1_win7_x6403
Filename ns3.jpg
Type ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, for GNU/Linux 2.6.32, BuildID[sha1]=35832871cca94970e54175a56e51862b855729db, not stripped
AI Score Not founds Behavior Score
1.0
ZERO API file : clean
VT API (file) 33 detected (Linux, Tsunami, GJIRTFg, Save, Kaiten, a variant of Linux, Malicious, score, Elf64, jybodq, Flooder, ciszq, Siggen, ABRisk, GGAT, Detected, ai score=82, CLASSIC, Static AI, Malicious ELF, Katien)
md5 f394ecfbd02494369cd4cca7a70059fa
sha256 9701ae7249aa394624bf33096e3f5dd2be0bb778debba3364f5277a50874cc31
ssdeep 1536:s74JwfL5zuNOOgHn9kR16Utxp3fCFUutbbT:i3L5zuNNgHCCFUsvT
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
danger File has been identified by 33 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info IsELF Executable and Linking Format executable file (Linux/Unix) binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure