SUSPICIOUS — virussign.com_875f90b111ec4b0ececa0c1e67946ea0.vir

Verdict: suspicious (59/100) · Family: capture

File type: pe · SHA-256: 25645bc6bc084101de911c528b795604dedc79647fd7011693f49a8f347cfd3b

MITRE ATT&CK

• T1056.001

YARA

Dynamic analysis (windows)

1 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Analyzed on MalwareAnalyzer by Cyble · Open interactive report