Report - ebd27404-8ca5-4d08-b42c-2097d92e0efc

ZIP Format
ScreenShot
Created 2025.05.04 12:46 Machine s1_win7_x6403
Filename ebd27404-8ca5-4d08-b42c-2097d92e0efc
Type Zip archive data, at least v2.0 to extract
AI Score Not founds Behavior Score
0.8
ZERO API file : malware
VT API (file) 29 detected (malicious, moderate confidence, Ghanarava, Artemis, GenericKD, Rugmi, score, Agentb, HijackLoader, CLASSIC, prkjg, Detected, Archive, 557V24, ABTrojan, IKCD, Swrort, Gencirc, susgen, Chgt)
md5 a5e308fb7843fd1bca1631a1b254d0cb
sha256 1ba64bef327120781fd41e945d1ccf012e5fc29df7d129eabc04e53a8a56d570
ssdeep 196608:omeiuwKaYUhOhUgnV18n43+F9epSZvrwclJUyeXcpjCwit2pVJQ8TdmH8cteryN:t+UhOzV18LesZvr3rHCcS2pTQ8hy8ct1
imphash
impfuzzy
  Network IP location

Signature (1cnts)

Level Description
warning File has been identified by 29 AntiVirus engines on VirusTotal as malicious

Rules (1cnts)

Level Name Description Collection
info zip_file_format ZIP file format binaries (upload)

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure