SUSPICIOUS — image1.png

SUSPICIOUS — image1.png is a image sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (49/100). 1 of 54 detection engines flagged it.

Identification

• SHA-256: 62dca244ba0f27353e3be6ec37f5663583d75ac319483baa70b05b02af100fdb
• SHA-1: 016a4d54baa23cd504350d6e97302aa776436d66
• MD5: d5a2ca304c1c31bbdd30294fd35c82de
• ssdeep: 6144:NWZQyFzAAxvaXEXy5do5kxlAZim9Vn1btWMRsJ/Gu+Wvb1WI+lUUikstbk:NWZHPva0XykxiMlaashGujD1SJiro
• TLSH: T1CC48246FB08688BFC21B36596FD014D853B297CE21130C66E058C39AD8B93F7AC95572
• Submitted as: image1.png
• File type: image · Size: 380550 bytes
• Verdict: suspicious (49/100)

Detections (1 of 54 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 49/100 is the fusion of 3 weighted signals:

• MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule high-entropy-blob) - engine signal, weight 0.35, confidence 0.70
• Embedded network infrastructure: http://purl.org/dc/elements/1.1/ - static signal, weight 0.35, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Embedded URLs

• http://ns.adobe.com/xap/1.0/
• http://www.w3.org/1999/02/22-rdf-syntax-ns#
• http://ns.adobe.com/xap/1.0/mm/
• http://ns.adobe.com/xap/1.0/sType/ResourceRef#
• http://ns.adobe.com/xap/1.0/sType/ResourceEvent#
• http://purl.org/dc/elements/1.1/
• http://ns.adobe.com/photoshop/1.0/

Embedded domains

• ns.adobe.com
• www.w3.org
• purl.org

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report