SUSPICIOUS — c9.xhtml

SUSPICIOUS — c9.xhtml is a unknown sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (47/100). 1 of 54 detection engines flagged it.

Identification

• SHA-256: aba6a7b3864f585d0648ae0676f89059598238e329f055980ab8ee8e6e7f1f92
• SHA-1: 3a9dbb38b0c1c435dfae776f56b049475687fe59
• MD5: d1199198bfa4235baab994edfa6adf91
• ssdeep: 12:TM3i4r5v+xDq4x8cEcgQ6pg5tEXUfnx/AEhHfVBkEUvEIzHFCroQb:qrr52IL1G52XU1hBVDfIzlm
• TLSH: T1240FE7BC10E71721C4F44C05F9054E602255F8258711FE2E8FB1DF06CC44CB0558E243
• Submitted as: c9.xhtml
• File type: unknown · Size: 567 bytes
• Verdict: suspicious (47/100)

Detections (1 of 54 engines)

• Microsoft Defender: flagged

Why this verdict

The suspicious score of 47/100 is the fusion of 1 weighted signal:

• Microsoft Defender flagged flagged (rule flagged) - engine signal, weight 0.55, confidence 0.85

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• http://www.w3.org/1999/xhtml

Embedded domains

• www.w3.org

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report