SUSPICIOUS — fcp-support-1.0beta1-1-x86_64.pkg.tar.zst

SUSPICIOUS — fcp-support-1.0beta1-1-x86_64.pkg.tar.zst is a unknown sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (35/100). 1 of 53 detection engines flagged it.

Identification

• SHA-256: dcd79efcab42d014bcf4f764bb5fc0c4ab8cd2f0f5515a7057417b3e622677f6
• SHA-1: b0f2d8c412799c5ac67cfddb57b8882a08bcab61
• MD5: e03179506a1e9ede6e0fea5fb66c21ba
• ssdeep: 1536:RqCUzkjlsK0oWRSuQ/L0LgTx0BxMe0SOvH57QDs4f7VDvf+sgLKIazVO9jz:0YjlPH30Ui5Ox2vmx0zVO9H
• TLSH: T11838012926CD85E1D548219F0356F3B2918FAD72FC250866CB2FDC62622091BFC576B2
• Submitted as: fcp-support-1.0beta1-1-x86_64.pkg.tar.zst
• File type: unknown · Size: 80862 bytes
• Verdict: suspicious (35/100)

Detections (1 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The suspicious score of 35/100 is the fusion of 2 weighted signals:

• MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule high-entropy-blob) - engine signal, weight 0.35, confidence 0.70
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report