CLEAN — 8efe93c999d02af334c90b87c0b4141acaa82171e88141067e13b8fe9ac1d9bf

CLEAN — 8efe93c999d02af334c90b87c0b4141acaa82171e88141067e13b8fe9ac1d9bf is a pe sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (25/100), attributed to the lief family. 1 of 12 detection engines flagged it.

Identification

• SHA-256: 8efe93c999d02af334c90b87c0b4141acaa82171e88141067e13b8fe9ac1d9bf
• SHA-1: 77d646744e2552b0c7a72f37eb18c44a640e19a1
• MD5: 049426656da2436ca0143da3bddab1b2
• imphash: 15904a5517c1b1501e6213edd591c487
• ssdeep: 6144:KZUrfioq+D7C1YgnjrSNOJ9rxb0P4ajgW:cMrqMGYg6NOJ4wNW
• TLSH: T1AD42E77601D77261E1BDDE60686088CC5C33B99D4071BB9B1513D8AE829BEF3C9F2198
• Submitted as: 8efe93c999d02af334c90b87c0b4141acaa82171e88141067e13b8fe9ac1d9bf
• File type: pe · Size: 215920 bytes
• Verdict: clean (25/100) · Family: lief

Detections (1 of 12 engines)

• LIEF (executable format parser): lief:invalid-authenticode

Why this verdict

The clean score of 25/100 is the fusion of 1 weighted signal:

• LIEF (executable format parser) flagged lief:invalid-authenticode (rule lief:invalid-authenticode) - engine signal, weight 0.35, confidence 0.70

Dynamic analysis (windows)

8 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• www.msftconnecttest.com
• searchapp.bundleassets.example
• edge-consumer-static.azureedge.net
• 224.0.0.252
• 192.168.122.1
• 192.168.122.255
• 192.168.122.105
• 239.255.255.250

Embedded URLs

• http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt0
• http://www.microsoft.com/windows0

Embedded domains

• www.microsoft.com
• crl.microsoft.com
• www.msftconnecttest.com
• searchapp.bundleassets.example
• edge-consumer-static.azureedge.net

More lief samples · Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report