Report - Photo.scr

Generic Malware Malicious Library UPX PE File OS Processor Check
ScreenShot
Created 2024.06.29 15:37 Machine s1_win7_x6401
Filename Photo.scr
Type MS-DOS executable
AI Score Not founds Behavior Score
0.6
ZERO API file : mailcious
VT API (file) 11 detected (Common, Malicious, score, Coinminer, Detected, ApplicUnwnt@#2h3vn1zpb4a5l, 0K4BQQ)
md5 1c16a630f64fcde9c94e5fa219374330
sha256 efdf8e6d182ba4644375fa7eaad615b0df41f4e872e1550466e76c8b2d816ddb
ssdeep 98304:EUmC6pOfTFU00bm8FmH/tFErRoSncMEOJaTMOKXX+dAnsvxXe+:mWfTFU3muRH6OJAMp+ysk+
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
watch File has been identified by 11 AntiVirus engines on VirusTotal as malicious

Rules (5cnts)

Level Name Description Collection
warning Generic_Malware_Zero Generic Malware binaries (upload)
watch Malicious_Library_Zero Malicious_Library binaries (upload)
watch UPX_Zero UPX packed file binaries (upload)
info OS_Processor_Check_Zero OS Processor Check binaries (upload)
info PE_Header_Zero PE File Signature binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure