Report - Aristois-Free.jar

ZIP Format
ScreenShot
Created 2025.01.18 16:34 Machine s1_win7_x6401
Filename Aristois-Free.jar
Type Zip archive data, at least v1.0 to extract
AI Score Not founds Behavior Score
2.0
ZERO API file : clean
VT API (file) 5 detected (Artemis, Detected, ABTrojan, WIRB, susgen)
md5 4cad86ed173ff0dad198582d86bf62b6
sha256 fbff2ebba99bfa194af533852062c6d60831c7cc3801d4af980c329721484a28
ssdeep 196608:N0EY4XwEff0cxykwL9g1leOnAU+1blTRLXKrC05:KYDf8FkHXAU8dJXKrb5
imphash
impfuzzy
  Network IP location

Signature (4cnts)

Level Description
danger A potential heapspray has been detected. 758 megabytes was sprayed onto the heap of the java.exe process
notice Allocates read-write-execute memory (usually to unpack itself)
notice File has been identified by 5 AntiVirus engines on VirusTotal as malicious
info Checks amount of memory in system

Rules (1cnts)

Level Name Description Collection
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure