Report - stodio.ps1

Generic Malware Antivirus
ScreenShot
Created 2023.10.24 09:37 Machine s1_win7_x6402
Filename stodio.ps1
Type ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
1.2
ZERO API file : clean
VT API (file) 6 detected (ASync, PowerShell, Kryptik)
md5 0c98e19efb1135d07bb79af8bee0956d
sha256 cceb8ebffabecbd086b581b0987fdc2cc4d4f7ee0b70fe414fab0589517cabc4
ssdeep 3072:g8VEO0EARhqyG5+6Gr9GNeaCIuvU4LowkqgGl:Dk/qyGtGr9GNeaCIuvU4LowngGl
imphash
impfuzzy
  Network IP location

Signature (4cnts)

Level Description
notice Allocates read-write-execute memory (usually to unpack itself)
notice File has been identified by 6 AntiVirus engines on VirusTotal as malicious
info Checks amount of memory in system
info Uses Windows APIs to generate a cryptographic key

Rules (2cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (download)
watch Antivirus Contains references to security software binaries (download)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure