SUSPICIOUS — f.txt

SUSPICIOUS — f.txt is a script sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (41/100). 0 of 50 detection engines flagged it.

Identification

• SHA-256: f02f7780998e04323c3311f626a9725e4570667ff42a1f7f92b95426741d3e71
• SHA-1: 652713adeedb746d7606bcb9442fcd8df2968e51
• MD5: a82a414dd2c1684625d75fd8ce4c1dc8
• ssdeep: 96:BeaLkKmX/3GT1BC5/dSA8o8vb3w34Bxft+lDh/kNJsR5WGAJSJMl5ylnSZ9:BeH/36B08A5eTF4h/SJsR55JMmO
• TLSH: T16B1EA6FF7C4E0EAECCAF94416F4C70DA174B8A54B52262C9D2E9C76179D99A47C24020
• Submitted as: f.txt
• File type: script · Size: 6944 bytes
• Verdict: suspicious (41/100)

Detections (0 of 50 engines)

No engine flagged this sample.

Why this verdict

The suspicious score of 41/100 is the fusion of 1 weighted signal:

• Obfuscated javascript script: dynamic-exec (rule script-deobfuscation) - static signal, weight 0.55, confidence 0.75

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded domains

• a.name
• pagead2.googlesyndication.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report