ScreenShot
| Created | 2025.04.19 08:21 | Machine | s1_win7_x6402 |
| Filename | 5.26행사일정표.hwp.lnk | ||
| Type | MS Windows shortcut, Has Description string, Has command line arguments, Icon number=1, ctime=Sun Dec 31 15:32:08 1600, mtime=Sun Dec 31 15:32:08 1600, atime=Sun Dec 31 15:32:08 1600, length=0, window=hidenormalshowminimized | ||
| AI Score | Not founds | Behavior Score |
|
| ZERO API | file : clean | ||
| VT API (file) | 32 detected (, Trojan/Script.Apt37, Detected, LNK/TrojanDropper.Agent.DD, malware (ai score=99), LNK.S.Agent.53215867, Malware.LNK/Drop.Agent.VPVF, Trojan.WinLNK.Boxter.4!c, Heur.BZC.YAX.Boxter.949.9D6CB188 (B), Troj/LnkDrop-M, Trojan.Link.Crafted, HEUR:Trojan.WinLNK.Powecod.c, TrojanDownloader:PowerShell/WinLNK!MSR, Trojan Horse, Heur.BZC.YAX.Boxter.949.9D6CB188, Win32.Trojan.Powecod.Jcnw, LNK:Agent-HS [Trj, BehavesLike.Dropper.vx, LNK/ABRisk.CTKX-4, Static AI - Suspicious LNK, Trojan.Agent.LNK.Gen, Trojan.PSRunner/LNK!1.BADE (CLASSIC), Malicious (score: 99), PowerShell.DownLoader.1765, LNK/Agent-FYF!74E3D8449284, LNK/Drop.Agent.VPVF, Dropper/LNK.Generic.S2264) | ||
| md5 | 74e3d84492845067a0da6cfa00c064eb | ||
| sha256 | f17ade8c0251c018ab291aa79c9837799ce654418088466933d45cd216fa8948 | ||
| ssdeep | 384:ToyDFuieMyIEZLc+nSlgrNQg4S7ug0gWgDLiZI:ToRMCZo+nEgrcu9Cm | ||
| imphash | |||
| impfuzzy | |||
Network IP location
Signature (0cnts)
| Level | Description |
|---|
Rules (5cnts)
| Level | Name | Description | Collection |
|---|---|---|---|
| warning | Generic_Malware_Zero | Generic Malware | binaries (upload) |
| info | HWP_file_format | HWP Document File | binaries (upload) |
| info | lnk_file_format | Microsoft Windows Shortcut File Format | binaries (upload) |
| info | Lnk_Format_Zero | LNK Format | binaries (upload) |
| info | Microsoft_Office_File_Zero | Microsoft Office File | binaries (upload) |
Network (0cnts) ?
| Request | CC | ASN Co | IP4 | Rule ? | ZERO ? |
|---|