Report - 1.ps1

Hide_EXE OS Processor Check
ScreenShot
Created 2023.12.04 15:34 Machine s1_win7_x6401
Filename 1.ps1
Type ASCII text, with very long lines, with CRLF line terminators
AI Score Not founds Behavior Score
0.0
ZERO API file : mailcious
VT API (file)
md5 b4c3aac58bfdfdaff5a51ec9370d0bc0
sha256 59d685f1d64f166b94d788b72d4f101dbb41f8f14cbedebcd5a896f849cdc953
ssdeep 24576:9gDA8A156GVpCIXdQW0zhBl+RAV5lAAKc5Gk96NPJ:9gjA1sqgWiW09vyh
imphash
impfuzzy
  Network IP location

Signature (0cnts)

Level Description

Rules (2cnts)

Level Name Description Collection
warning hide_executable_file Hide executable file binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure