Report - Photo.scr

Generic Malware Malicious Library UPX PE File OS Processor Check
ScreenShot
Created 2024.06.29 15:11 Machine s1_win7_x6401
Filename Photo.scr
Type MS-DOS executable
AI Score Not founds Behavior Score
0.4
ZERO API file : clean
VT API (file) 2 detected (Coinminer, Detected)
md5 2a4155ca43741401f44cff063859affb
sha256 eaf34aa272aa6550ae45d504c10f4d90b6609ec7a57bff4ba4a8e8f273e2736f
ssdeep 98304:zapjLqB4eFb55TJolc0GMtAKj/gXSYG47MUkc3QDJ2dll+4SfE8Il:uveFb5X0f/o77MvcEyjhSil
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
notice File has been identified by 2 AntiVirus engines on VirusTotal as malicious

Rules (5cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure