SUSPICIOUS — 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35.zip

SUSPICIOUS — 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35.zip is a zip sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (43/100). 1 of 55 detection engines flagged it.

Identification

• SHA-256: 9123d28adc07540a5fdfa84462f7038f9c63e0ce499172b4a875ae0889eb36dc
• SHA-1: 8abf2011d961331f8f401c7936aa9e5681bb7b37
• MD5: a7395752be950b4710a1844912e80918
• ssdeep: 1536:iW+no1PEYpf174CGqgXMVPCxu5qVlEAZUmTUBln8keQyvEjL4xoRzGCkfE:f1PN546IRUOUn8kevaUx+6CkfE
• TLSH: T1CF3A12E914E64D90835A74925206BF92705543AD998AB37533271CCB30FAC017EBF4A7
• Submitted as: 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35.zip
• File type: zip · Size: 96347 bytes
• Verdict: suspicious (43/100)

Detections (1 of 55 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 43/100 is the fusion of 3 weighted signals:

• MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule high-entropy-blob) - engine signal, weight 0.35, confidence 0.70
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
• Archive contains executables: 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35.elf - static signal, weight 0.25, confidence 0.50

Archive contents (1 executable)

This zip carries 1 extracted member, each analyzed as its own sample:

• 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35.elf - 31cd898fd42a6b1dedbb16f3f0a5639d054222e826428c0eaea3125c1de7cf35

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report