ScreenShot
Created 2024.04.10 13:42 Machine s1_win7_x6401
Filename 1.txt
Type ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, for GNU/Linux 2.6.9, stripped
AI Score Not founds Behavior Score
1.2
ZERO API file : malware
VT API (file) 42 detected (Linux, Xorddos, Unix, Save, a variant of Linux, DDOSAgent, Malicious, score, Xarcen, CLASSIC, Siggen, TrojanDDoS, Detected, ai score=83, Camelot, Static AI, Malicious ELF)
md5 694a672878a1f7945c020a0a3ca74367
sha256 75bfd448e4274cc4e5804c43768f62a36ccb3fc3b1df06e14d9c892daa2cde19
ssdeep 12288:4Ufrcn+vwK5ripVU4tdZ1pNL/pVbzP66ySjQn36Eoj:/fUywKQ7Fb1pNL/p5PfjQn36Eu
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
danger File has been identified by 42 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info IsELF Executable and Linking Format executable file (Linux/Unix) binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure