CLEAN — swflash.cab

CLEAN — swflash.cab is a archive sample analyzed by MalwareAnalyzer by Cyble with a clean verdict (14/100). 1 of 53 detection engines flagged it.

Identification

• SHA-256: eea074db3f86fed73a36d9e6c734af8080a4d2364e817eecd5cb37cb9ec9dc0b
• SHA-1: 2d83b50b5992540e2150dfcaddd10f7c67633d2c
• MD5: b3e138191eeca0adcc05cb90bb4c76ff
• ssdeep: 6144:vaSusyjE8qpy5T52Advnoa7lsyxrXGbUG0y75HkF:vrRyjRb59xTtXGbmy9e
• TLSH: T11E43131763B4B050A997C2A88ABFFED0D667E9616220E2D2343B9374F9052E66C54343
• Submitted as: swflash.cab
• File type: archive · Size: 230624 bytes
• Verdict: clean (14/100)

Detections (1 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob

Why this verdict

The clean score of 14/100 is the fusion of 1 weighted signal:

• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Archive contents (1 executable)

This archive carries 1 extracted member, each analyzed as its own sample:

• FP_AX_CAB_INSTALLER64.exe - c8c8cff5dc0a3f205e59f0bbfe30b6ade490c10b9ecc7043f264ec67ef9b6a11

Embedded URLs

• https://www.digicert.com/CPS0
• http://cacerts.digicert.com/DigiCertEVCodeSigningCA-SHA2.crt0
• http://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt0
• http://crl3.digicert.com/DigiCertHighAssuranceEVRootCA.crl0@
• http://crl4.digicert.com/DigiCertHighAssuranceEVRootCA.crl0
• http://www.digicert.com/ssl-cps-repository.htm0
• http://crl3.digicert.com/sha2-assured-ts.crl02
• http://crl4.digicert.com/sha2-assured-ts.crl0

Embedded domains

• crl3.digicert.com
• crl4.digicert.com
• www.digicert.com
• cacerts.digicert.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report