ScreenShot
Created 2025.04.07 10:44 Machine s1_win7_x6402
Filename eula.rtf
Type Rich Text Format data, version 1, unknown character set
AI Score Not founds Behavior Score
1.8
ZERO API file : clean
VT API (file) 3 detected (RTFEXP, Probably Heur, RTFBadVersion)
md5 2ab3df4762fbde5d86e99a1ad147850e
sha256 d491fc79587eff577d77e2a5a8f688a195a0c2e1a5ef074e4a356981fb79be95
ssdeep 1536:bSaqEiSE3t+bOD3OT6gAL+Hj3jQltwqexPRQzYAij/OeYxLPrUHiBm/RuuVu:buGUVsw+HjzCbgsij/O9p4HSm5uuVu
imphash
impfuzzy
  Network IP location

Signature (5cnts)

Level Description
notice An application raised an exception which may be indicative of an exploit crash
notice Creates hidden or system file
notice File has been identified by 3 AntiVirus engines on VirusTotal as malicious
notice RTF file has an unknown character set
info One or more processes crashed

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure