SUSPICIOUS — Proc.Verba.jpg

SUSPICIOUS — Proc.Verba.jpg is a image sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (35/100). 1 of 53 detection engines flagged it.

Identification

• SHA-256: 2fce3cdccb39629d238d1a0fdceba1afc8c70a39e2f633b8197292c22a865184
• SHA-1: 9957e3b44f75f2eb314a9e574d9ba160bb5b53de
• MD5: 26689cbc8ce26afbddc1215df963b6df
• ssdeep: 24576:2yKIn15/8PCeqJuhaLogAFslLQlhAJAHj/o2dg3fnc8uhx71sYK:nn1x86ecuhILa6LQEJAHbZq37uw
• TLSH: T1A557B01E3634A20635E2AB88787D083C77E2DBE76635EC8F5470A96D41093298DF11F6
• Submitted as: Proc.Verba.jpg
• File type: image · Size: 1505458 bytes
• Verdict: suspicious (35/100)

Detections (1 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 35/100 is the fusion of 2 weighted signals:

• MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule high-entropy-blob) - engine signal, weight 0.35, confidence 0.70
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Embedded domains

• m.no
• 1.ml

File paths

• q:\\
• h:\:T&F

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report