diff --git a/beacon.bin b/beacon.bin index 54ee247..3745006 100644 Binary files a/beacon.bin and b/beacon.bin differ diff --git a/lab_results/metasploit/aes.exe.json b/lab_results/metasploit/aes.exe.json new file mode 100644 index 0000000..ff878b2 --- /dev/null +++ b/lab_results/metasploit/aes.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "YzMwN2I5MzY3OTVkZDI0YWY5Y2UxYzJiMDk2YzJlN2U6MTc0Nzc2ODQ4OQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/YzMwN2I5MzY3OTVkZDI0YWY5Y2UxYzJiMDk2YzJlN2U6MTc0Nzc2ODQ4OQ==", + "item": "https://www.virustotal.com/api/v3/files/ad266a28034033cf107a663dd1e9ca824e677568e9cc6261ff6fe994387441f8" + }, + "attributes": { + "date": 1747768489, + "stats": { + "malicious": 6, + "suspicious": 0, + "undetected": 65, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 1, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (moderate confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:lhJGOvk7491UoPJIqbMpIg)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "failure", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "ad266a28034033cf107a663dd1e9ca824e677568e9cc6261ff6fe994387441f8", + "md5": "c307b936795dd24af9ce1c2b096c2e7e", + "sha1": "9245a51ccb430db05cdc49345e34d8432ac31620", + "size": 145920 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/base64.exe.json b/lab_results/metasploit/base64.exe.json new file mode 100644 index 0000000..1a6efb5 --- /dev/null +++ b/lab_results/metasploit/base64.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTQ2ZWZlNTQxMTlhZDIzM2Y1NzI3YWVhOGE0MDMzNjg6MTc0Nzc2ODUyNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTQ2ZWZlNTQxMTlhZDIzM2Y1NzI3YWVhOGE0MDMzNjg6MTc0Nzc2ODUyNQ==", + "item": "https://www.virustotal.com/api/v3/files/19371a61e18bd17cac831b3feb34a6b341b1d8b8b278fc0da321714c429c3654" + }, + "attributes": { + "status": "completed", + "date": 1747768525, + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "19371a61e18bd17cac831b3feb34a6b341b1d8b8b278fc0da321714c429c3654", + "md5": "e46efe54119ad233f5727aea8a403368", + "sha1": "f52c07fa9f520a3c643cd8c860988a6ec1772144", + "size": 141312 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/base64api.exe.json b/lab_results/metasploit/base64api.exe.json new file mode 100644 index 0000000..0ce73bc --- /dev/null +++ b/lab_results/metasploit/base64api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "OWJmYzYzZmI2YTI0OTU3ZDgwNTAwZDNjMzViNGU0M2E6MTc0Nzc2ODU1Nw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/OWJmYzYzZmI2YTI0OTU3ZDgwNTAwZDNjMzViNGU0M2E6MTc0Nzc2ODU1Nw==", + "item": "https://www.virustotal.com/api/v3/files/373a51161c13e91dd27ce4f355b7dd31dc46bd70ee24c5290b6d9221706ce4b2" + }, + "attributes": { + "status": "completed", + "date": 1747768557, + "stats": { + "malicious": 6, + "suspicious": 0, + "undetected": 66, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "malicious", + "result": "HEUR:Trojan.Win32.Generic" + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:Vcs6/L3/aHZR+MjlctqvXA)" + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "373a51161c13e91dd27ce4f355b7dd31dc46bd70ee24c5290b6d9221706ce4b2", + "md5": "9bfc63fb6a24957d80500d3c35b4e43a", + "sha1": "39a633f984570686c813f470a07c7ca7d0b942f5", + "size": 142336 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/beacon.bin.metasploit b/lab_results/metasploit/beacon.bin.metasploit new file mode 100644 index 0000000..3745006 Binary files /dev/null and b/lab_results/metasploit/beacon.bin.metasploit differ diff --git a/lab_results/metasploit/bin2ip.exe.json b/lab_results/metasploit/bin2ip.exe.json new file mode 100644 index 0000000..523d216 --- /dev/null +++ b/lab_results/metasploit/bin2ip.exe.json @@ -0,0 +1,634 @@ +{ + "data": { + "id": "OWU1NTg2NGQyMjBhOTEwOTBhZGYzOGVmYzc5YTA2NjU6MTc0Nzc2ODY0OA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/OWU1NTg2NGQyMjBhOTEwOTBhZGYzOGVmYzc5YTA2NjU6MTc0Nzc2ODY0OA==", + "item": "https://www.virustotal.com/api/v3/files/7c54add88ebc3ee8448510171bbf0c11628333e83551ca19317b5c05c096cf28" + }, + "attributes": { + "date": 1747768648, + "status": "completed", + "stats": { + "malicious": 10, + "suspicious": 0, + "undetected": 61, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_90% (D)" + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "malicious", + "result": "TrojanDownloader/Agent.afe" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "malicious", + "result": "HEUR:Trojan.Win32.Generic" + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!7C54ADD88EBC" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Backdoor.CobaltStrike/x64!1.E71D (CLASSIC)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "7c54add88ebc3ee8448510171bbf0c11628333e83551ca19317b5c05c096cf28", + "md5": "9e55864d220a91090adf38efc79a0665", + "sha1": "e3d8f7a5d684c03a12d13ec4602d8b0ed4f1d050", + "size": 157184 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/bin2mac.exe.json b/lab_results/metasploit/bin2mac.exe.json new file mode 100644 index 0000000..e3bf946 --- /dev/null +++ b/lab_results/metasploit/bin2mac.exe.json @@ -0,0 +1,634 @@ +{ + "data": { + "id": "ODNjMmM2Y2UyOTk4NTcyZDVjYjQ0NDhlNThhYWZlZGE6MTc0Nzc2ODcwNA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ODNjMmM2Y2UyOTk4NTcyZDVjYjQ0NDhlNThhYWZlZGE6MTc0Nzc2ODcwNA==", + "item": "https://www.virustotal.com/api/v3/files/0fbfdd5324434746f164adc75b905f16288a9a2489f8a3e821622e7d3769c1e7" + }, + "attributes": { + "stats": { + "malicious": 18, + "suspicious": 0, + "undetected": 53, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747768704, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "malicious", + "result": "Malicious (score: 100)" + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "malicious", + "result": "exe.unknown.lazy" + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "malicious", + "result": "VHO:Trojan.Win32.Cometer.gen" + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "malicious", + "result": "Gen:Variant.Lazy.471170" + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "malicious", + "result": "Gen:Variant.Lazy.471170" + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "malicious", + "result": "Gen:Variant.Lazy.471170 (B)" + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "malicious", + "result": "Gen:Variant.Lazy.471170" + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!0FBFDD532443" + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "malicious", + "result": "Gen:Variant.Lazy.471170" + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Lazy.D73082" + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Backdoor.CobaltStrike/x64!1.E716 (CLASSIC)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "0fbfdd5324434746f164adc75b905f16288a9a2489f8a3e821622e7d3769c1e7", + "md5": "83c2c6ce2998572d5cb4448e58aafeda", + "sha1": "a6c881f186f2d87c35f3b87c6959539a4485f12b", + "size": 145408 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/caesar.exe.json b/lab_results/metasploit/caesar.exe.json new file mode 100644 index 0000000..2f97302 --- /dev/null +++ b/lab_results/metasploit/caesar.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MTFkZDc0MmM1NzJkNmVhY2Q0YTI2NDhmMTFhODExNDc6MTc0Nzc2ODc1Nw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MTFkZDc0MmM1NzJkNmVhY2Q0YTI2NDhmMTFhODExNDc6MTc0Nzc2ODc1Nw==", + "item": "https://www.virustotal.com/api/v3/files/3cede5767e6888725bfcfa0e54ca2eedd8c562754d37fdde3114ccf447a084aa" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747768757 + } + }, + "meta": { + "file_info": { + "sha256": "3cede5767e6888725bfcfa0e54ca2eedd8c562754d37fdde3114ccf447a084aa", + "md5": "11dd742c572d6eacd4a2648f11a81147", + "sha1": "2c35c95ce3c43454d5665796a7438501e5ad7560", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/jargon.exe.json b/lab_results/metasploit/jargon.exe.json new file mode 100644 index 0000000..e6dfdb2 --- /dev/null +++ b/lab_results/metasploit/jargon.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZGQ0Y2JmNmM4YzRiMDQ4Mzc4YjI1ZmRjMTQyZmZkMjY6MTc0Nzc2ODg2OQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZGQ0Y2JmNmM4YzRiMDQ4Mzc4YjI1ZmRjMTQyZmZkMjY6MTc0Nzc2ODg2OQ==", + "item": "https://www.virustotal.com/api/v3/files/6ce2e53b529bb956afa77405122321ad863b90d74913436d7b1291a23239d4fa" + }, + "attributes": { + "date": 1747768869, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "6ce2e53b529bb956afa77405122321ad863b90d74913436d7b1291a23239d4fa", + "md5": "dd4cbf6c8c4b048378b25fdc142ffd26", + "sha1": "29c6d37fb9dbb07f8d9312cfedc177742f207c53", + "size": 161792 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/jigsaw.exe.json b/lab_results/metasploit/jigsaw.exe.json new file mode 100644 index 0000000..fb38964 --- /dev/null +++ b/lab_results/metasploit/jigsaw.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NTUzN2EzNzNiYWFiMGY0MzQ0MTBmZTMxNDUyNjFkYzY6MTc0Nzc2ODkyNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NTUzN2EzNzNiYWFiMGY0MzQ0MTBmZTMxNDUyNjFkYzY6MTc0Nzc2ODkyNQ==", + "item": "https://www.virustotal.com/api/v3/files/f9a77538a49b06dea7cb93d922f92295761f412d0785ccc46ee9104c28f09e99" + }, + "attributes": { + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747768925, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_60% (D)" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "f9a77538a49b06dea7cb93d922f92295761f412d0785ccc46ee9104c28f09e99", + "md5": "5537a373baab0f434410fe3145261dc6", + "sha1": "ca6e21b875d623a505b5235401668d87c7880912", + "size": 153088 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/noobfuscation.exe.json b/lab_results/metasploit/noobfuscation.exe.json new file mode 100644 index 0000000..bd0fd89 --- /dev/null +++ b/lab_results/metasploit/noobfuscation.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NGU0ZjJhNTk0Y2QxNWExN2FlYmRmYzllZjU4YmRiNWY6MTc0Nzc2ODk3NA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NGU0ZjJhNTk0Y2QxNWExN2FlYmRmYzllZjU4YmRiNWY6MTc0Nzc2ODk3NA==", + "item": "https://www.virustotal.com/api/v3/files/577dcc605ee1038f3c6784d85bf4611f81e78a0da9dcc1f2dbfbc34de9952730" + }, + "attributes": { + "date": 1747768974, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "577dcc605ee1038f3c6784d85bf4611f81e78a0da9dcc1f2dbfbc34de9952730", + "md5": "4e4f2a594cd15a17aebdfc9ef58bdb5f", + "sha1": "7dfe9daa66af59822ad08c7a89009b5a578ec77a", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/offset.exe.json b/lab_results/metasploit/offset.exe.json new file mode 100644 index 0000000..48f53ec --- /dev/null +++ b/lab_results/metasploit/offset.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NmY4ODcxOGY4NTVjNGU3NTViZWI4MTZhMGE4MGVmM2E6MTc0Nzc2OTAxOQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NmY4ODcxOGY4NTVjNGU3NTViZWI4MTZhMGE4MGVmM2E6MTc0Nzc2OTAxOQ==", + "item": "https://www.virustotal.com/api/v3/files/0187965b3a98098fd68bbb1e6f7f25a6aae8702e116cfbf290d92b4521ac0990" + }, + "attributes": { + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747769019 + } + }, + "meta": { + "file_info": { + "sha256": "0187965b3a98098fd68bbb1e6f7f25a6aae8702e116cfbf290d92b4521ac0990", + "md5": "6f88718f855c4e755beb816a0a80ef3a", + "sha1": "66cf4e5b5e4ee55d9c107c83287bdb432e92f4fc", + "size": 145408 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/rc4api.exe.json b/lab_results/metasploit/rc4api.exe.json new file mode 100644 index 0000000..43f98b2 --- /dev/null +++ b/lab_results/metasploit/rc4api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NGJlNDdhYjhmMGI4ZmU3MjUyNzVhNjRiZDAzNzIyMmU6MTc0Nzc2OTA2Mw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NGJlNDdhYjhmMGI4ZmU3MjUyNzVhNjRiZDAzNzIyMmU6MTc0Nzc2OTA2Mw==", + "item": "https://www.virustotal.com/api/v3/files/77342a4d11ae01ddd2381721805d991bcc11dfc154fa0ba10d5eeedcda5b9e97" + }, + "attributes": { + "date": 1747769063, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "77342a4d11ae01ddd2381721805d991bcc11dfc154fa0ba10d5eeedcda5b9e97", + "md5": "4be47ab8f0b8fe725275a64bd037222e", + "sha1": "5c8abad4590b745402c2b1a19394ee85d230ddcd", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/reverse_byte_order.exe.json b/lab_results/metasploit/reverse_byte_order.exe.json new file mode 100644 index 0000000..ca02780 --- /dev/null +++ b/lab_results/metasploit/reverse_byte_order.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NjBjMjgxMWU3MTdmYTY1Y2FjYzI3N2U0ODY4ZGMxMTE6MTc0Nzc2OTA5Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NjBjMjgxMWU3MTdmYTY1Y2FjYzI3N2U0ODY4ZGMxMTE6MTc0Nzc2OTA5Ng==", + "item": "https://www.virustotal.com/api/v3/files/4025309684a0e82646a740af999301ed58889cc1a034067faeed60e6859039cd" + }, + "attributes": { + "status": "completed", + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747769096 + } + }, + "meta": { + "file_info": { + "sha256": "4025309684a0e82646a740af999301ed58889cc1a034067faeed60e6859039cd", + "md5": "60c2811e717fa65cacc277e4868dc111", + "sha1": "3ba78e5d5eb2e3d59191ff429b7a86b18297a3a1", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/reverse_hex_string.exe.json b/lab_results/metasploit/reverse_hex_string.exe.json new file mode 100644 index 0000000..1f69cd0 --- /dev/null +++ b/lab_results/metasploit/reverse_hex_string.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MjVlNzFlOGJmODgwYmI4NGIwODRiZDQxOTQ2Njg0Yzk6MTc0Nzc2OTEzMg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MjVlNzFlOGJmODgwYmI4NGIwODRiZDQxOTQ2Njg0Yzk6MTc0Nzc2OTEzMg==", + "item": "https://www.virustotal.com/api/v3/files/ed54901a1e706fd1b3ea76156ab57fcca0b766199f4c1af63041c5e15180a1a7" + }, + "attributes": { + "date": 1747769132, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 1, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": null, + "engine_update": "20250520", + "category": "failure", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "ed54901a1e706fd1b3ea76156ab57fcca0b766199f4c1af63041c5e15180a1a7", + "md5": "25e71e8bf880bb84b084bd41946684c9", + "sha1": "3f903c8e34090628c1a8fe993ec1d338906348d9", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/scan_results.txt b/lab_results/metasploit/scan_results.txt new file mode 100644 index 0000000..ac32d90 --- /dev/null +++ b/lab_results/metasploit/scan_results.txt @@ -0,0 +1,18 @@ +aes.exe: 6 +base64.exe: 3 +base64api.exe: 6 +bin2ip.exe: 10 +bin2mac.exe: 18 +caesar.exe: 2 +jargon.exe: 2 +jigsaw.exe: 3 +noobfuscation.exe: 3 +offset.exe: 3 +rc4api.exe: 2 +reverse_byte_order.exe: 2 +reverse_hex_string.exe: 2 +twoarray.exe: 3 +uuidapi.exe: 11 +xor_multibyte.exe: 2 +xor_reverse.exe: 3 +xor_single.exe: 3 diff --git a/lab_results/metasploit/twoarray.exe.json b/lab_results/metasploit/twoarray.exe.json new file mode 100644 index 0000000..3e162ce --- /dev/null +++ b/lab_results/metasploit/twoarray.exe.json @@ -0,0 +1,634 @@ +{ + "data": { + "id": "Yjk2OTg1NGM3MWYwODA0NmE3ZTg0YWFlNzZiYjNjMDk6MTc0Nzc2OTI5OQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/Yjk2OTg1NGM3MWYwODA0NmE3ZTg0YWFlNzZiYjNjMDk6MTc0Nzc2OTI5OQ==", + "item": "https://www.virustotal.com/api/v3/files/502cb8b88886acbe73c3326a1c62db70d9de71a6c357dc5a3eaa350e1afa2c91" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "timeout", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 67, + "harmless": 0, + "timeout": 1, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747769299, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "502cb8b88886acbe73c3326a1c62db70d9de71a6c357dc5a3eaa350e1afa2c91", + "md5": "b969854c71f08046a7e84aae76bb3c09", + "sha1": "741fa7839aa67ddb9a50f296559c1b6a65c907c9", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/uuidapi.exe.json b/lab_results/metasploit/uuidapi.exe.json new file mode 100644 index 0000000..f600771 --- /dev/null +++ b/lab_results/metasploit/uuidapi.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTg2MGYxYjNjZjIzMmRhNzBiNWQxNjA2ZTc0YTY2Zjc6MTc0Nzc2OTQyNw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTg2MGYxYjNjZjIzMmRhNzBiNWQxNjA2ZTc0YTY2Zjc6MTc0Nzc2OTQyNw==", + "item": "https://www.virustotal.com/api/v3/files/758d89e06fcff6fb4d47e87c0f01691c1e4bb74c2a429ecef365da38074b5356" + }, + "attributes": { + "date": 1747769427, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "malicious", + "result": "Malicious (score: 100)" + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "malicious", + "result": "HEUR:Trojan.Win32.Generic" + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!758D89E06FCF" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Backdoor.CobaltStrike/x64!1.E718 (CLASSIC)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "timeout", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 11, + "suspicious": 0, + "undetected": 58, + "harmless": 0, + "timeout": 3, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "758d89e06fcff6fb4d47e87c0f01691c1e4bb74c2a429ecef365da38074b5356", + "md5": "e860f1b3cf232da70b5d1606e74a66f7", + "sha1": "973e7fb235a2c5e65a5a28629955c5e485e22c94", + "size": 142848 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/xor_multibyte.exe.json b/lab_results/metasploit/xor_multibyte.exe.json new file mode 100644 index 0000000..3b492ff --- /dev/null +++ b/lab_results/metasploit/xor_multibyte.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MDY5YTI3YTQzODZlNDA2YzhkMjg3ZTZlMTFiZGUzMzI6MTc0Nzc2OTUwOQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MDY5YTI3YTQzODZlNDA2YzhkMjg3ZTZlMTFiZGUzMzI6MTc0Nzc2OTUwOQ==", + "item": "https://www.virustotal.com/api/v3/files/efffcb63649f6bd074e5a9c4f32fa70d828474faafd15dc6aa5902ac78198492" + }, + "attributes": { + "date": 1747769509, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "efffcb63649f6bd074e5a9c4f32fa70d828474faafd15dc6aa5902ac78198492", + "md5": "069a27a4386e406c8d287e6e11bde332", + "sha1": "7fd081f47924dbbd12844e771fe6923ace8938ce", + "size": 154624 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/xor_reverse.exe.json b/lab_results/metasploit/xor_reverse.exe.json new file mode 100644 index 0000000..ebbeefb --- /dev/null +++ b/lab_results/metasploit/xor_reverse.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "YWIyMmFlNzNjNmRlNDVhYjA4Nzg1YWY0ZjQzNDk0MDY6MTc0Nzc2OTUzNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/YWIyMmFlNzNjNmRlNDVhYjA4Nzg1YWY0ZjQzNDk0MDY6MTc0Nzc2OTUzNQ==", + "item": "https://www.virustotal.com/api/v3/files/3a4f94ddb6c6c60403b9c84b70c89ac31685a7a0a55a387c4b04bef6da01ec71" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747769535 + } + }, + "meta": { + "file_info": { + "sha256": "3a4f94ddb6c6c60403b9c84b70c89ac31685a7a0a55a387c4b04bef6da01ec71", + "md5": "ab22ae73c6de45ab08785af4f4349406", + "sha1": "f388c11812efa23e3f816c8233b32b6f2f06c704", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/metasploit/xor_single.exe.json b/lab_results/metasploit/xor_single.exe.json new file mode 100644 index 0000000..ae68b7d --- /dev/null +++ b/lab_results/metasploit/xor_single.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NGY1NWZiNGI1NDdmMDUyNTBhODA0YzUxYzRlZGUzNTY6MTc0Nzc2OTY1Mg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NGY1NWZiNGI1NDdmMDUyNTBhODA0YzUxYzRlZGUzNTY6MTc0Nzc2OTY1Mg==", + "item": "https://www.virustotal.com/api/v3/files/81023564813c9efaebd8ca96814b4366de9aaebffbc4fbc7dc5d57f485933a45" + }, + "attributes": { + "date": 1747769652, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55814", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31230", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan:Win64/Meterpreter.D" + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747765843", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "81023564813c9efaebd8ca96814b4366de9aaebffbc4fbc7dc5d57f485933a45", + "md5": "4f55fb4b547f05250a804c51c4ede356", + "sha1": "70c9c241b93315709853d216d83dadc3a6beded7", + "size": 144896 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/aes.exe.json b/lab_results/random_shellcode/aes.exe.json new file mode 100644 index 0000000..4e429a9 --- /dev/null +++ b/lab_results/random_shellcode/aes.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "Yjk1MjhhMTQwNGFiNmNiNmQ5OTVmNDIyMzUwYmI2M2M6MTc0Nzc2NTYxMQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/Yjk1MjhhMTQwNGFiNmNiNmQ5OTVmNDIyMzUwYmI2M2M6MTc0Nzc2NTYxMQ==", + "item": "https://www.virustotal.com/api/v3/files/549275a9a8bd911366f4449d419eadd5eccd2e33d40ba2cfc5b90fe49c6d3ad9" + }, + "attributes": { + "stats": { + "malicious": 5, + "suspicious": 0, + "undetected": 67, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747765611, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37739", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:7g651GSeuHU9+dImKORBnw)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "549275a9a8bd911366f4449d419eadd5eccd2e33d40ba2cfc5b90fe49c6d3ad9", + "md5": "b9528a1404ab6cb6d995f422350bb63c", + "sha1": "65fe6be37812974b9d329a7501a5781c0398ff36", + "size": 140800 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/base64.exe.json b/lab_results/random_shellcode/base64.exe.json new file mode 100644 index 0000000..0bf181a --- /dev/null +++ b/lab_results/random_shellcode/base64.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZGY4NTgzYTljMmY2M2NhN2Y0YzBlY2Y1MzgzNDc4Mjc6MTc0Nzc2NjIxMg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZGY4NTgzYTljMmY2M2NhN2Y0YzBlY2Y1MzgzNDc4Mjc6MTc0Nzc2NjIxMg==", + "item": "https://www.virustotal.com/api/v3/files/f8b6b2b150e2846343e5ee0165a89d23f645987cf3140dd6cd046c3dd61dd8a3" + }, + "attributes": { + "date": 1747766212, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "malicious", + "result": "PUA.RiskWare.Lsassdumper" + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "f8b6b2b150e2846343e5ee0165a89d23f645987cf3140dd6cd046c3dd61dd8a3", + "md5": "df8583a9c2f63ca7f4c0ecf538347827", + "sha1": "0359c80086551563f2195c986f93f9722f6269ac", + "size": 140288 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/base64api.exe.json b/lab_results/random_shellcode/base64api.exe.json new file mode 100644 index 0000000..b021301 --- /dev/null +++ b/lab_results/random_shellcode/base64api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTZkYmI4ZmQxZDY0MDU2ZmMwNGE5MDIxYTRjYTRlZGI6MTc0Nzc2NjI0MQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTZkYmI4ZmQxZDY0MDU2ZmMwNGE5MDIxYTRjYTRlZGI6MTc0Nzc2NjI0MQ==", + "item": "https://www.virustotal.com/api/v3/files/4a0b6834e270b88fe108f79fe0e30b04995d299fb4e316e84e2ed38cf4ff5702" + }, + "attributes": { + "date": 1747766241, + "stats": { + "malicious": 5, + "suspicious": 0, + "undetected": 67, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (moderate confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Kryptik@AI.93 (RDML:/obxqfC60m5r6KbMBGkNog)" + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "4a0b6834e270b88fe108f79fe0e30b04995d299fb4e316e84e2ed38cf4ff5702", + "md5": "e6dbb8fd1d64056fc04a9021a4ca4edb", + "sha1": "6972d45f75641e85821b6abc2c2532992eb46b0a", + "size": 141312 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/beacon.bin.random b/lab_results/random_shellcode/beacon.bin.random new file mode 100644 index 0000000..54ee247 Binary files /dev/null and b/lab_results/random_shellcode/beacon.bin.random differ diff --git a/lab_results/random_shellcode/bin2ip.exe.json b/lab_results/random_shellcode/bin2ip.exe.json new file mode 100644 index 0000000..03edd8d --- /dev/null +++ b/lab_results/random_shellcode/bin2ip.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTFhNDc5MzdkOTg0ZWY1NTY4NDFkZmY4MTYxZDdmOWU6MTc0Nzc2NjI2Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTFhNDc5MzdkOTg0ZWY1NTY4NDFkZmY4MTYxZDdmOWU6MTc0Nzc2NjI2Ng==", + "item": "https://www.virustotal.com/api/v3/files/2a3761abf26b3f5cbf9f917429dbb1767ab51f16bafbdc71c8c556a9991a889f" + }, + "attributes": { + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766266, + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!2A3761ABF26B" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "malicious", + "result": "PUA.RiskWare.Lsassdumper" + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "2a3761abf26b3f5cbf9f917429dbb1767ab51f16bafbdc71c8c556a9991a889f", + "md5": "e1a47937d984ef556841dff8161d7f9e", + "sha1": "1e20ae6d8661c1d01866915619b4c474c29ba9a4", + "size": 152064 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/bin2mac.exe.json b/lab_results/random_shellcode/bin2mac.exe.json new file mode 100644 index 0000000..f4c5a38 --- /dev/null +++ b/lab_results/random_shellcode/bin2mac.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTVlMmY2ZjgxZGJmNGE2YzI5YzYxZDZhNTMxMTlmMjE6MTc0Nzc2NjM1Mg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTVlMmY2ZjgxZGJmNGE2YzI5YzYxZDZhNTMxMTlmMjE6MTc0Nzc2NjM1Mg==", + "item": "https://www.virustotal.com/api/v3/files/fffa3c1a04153eeaae01bea1a24e6954cb134362b9136b3c632130f173a056df" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (moderate confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "malicious", + "result": "ML.Attribute.HighConfidence" + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!FFFA3C1A0415" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37739", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "date": 1747766352, + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "fffa3c1a04153eeaae01bea1a24e6954cb134362b9136b3c632130f173a056df", + "md5": "e5e2f6f81dbf4a6c29c61d6a53119f21", + "sha1": "56b9adaeb2eabca69e53b85d2c79b6daca5d74d7", + "size": 140800 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/caesar.exe.json b/lab_results/random_shellcode/caesar.exe.json new file mode 100644 index 0000000..896a783 --- /dev/null +++ b/lab_results/random_shellcode/caesar.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZThmMzM3Y2NiMmY5YmMwMWRkZTUzZGUzYzA1MTMxOWY6MTc0Nzc2NjM3OA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZThmMzM3Y2NiMmY5YmMwMWRkZTUzZGUzYzA1MTMxOWY6MTc0Nzc2NjM3OA==", + "item": "https://www.virustotal.com/api/v3/files/3117d06a9bd8efff3b13b6122d78e919acd7de091c142ce373ad3f8a5ab7c996" + }, + "attributes": { + "status": "completed", + "date": 1747766378, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "3117d06a9bd8efff3b13b6122d78e919acd7de091c142ce373ad3f8a5ab7c996", + "md5": "e8f337ccb2f9bc01dde53de3c051319f", + "sha1": "15e2b9ed18c5667bc36d113017e058f508201f65", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/jargon.exe.json b/lab_results/random_shellcode/jargon.exe.json new file mode 100644 index 0000000..db2b82e --- /dev/null +++ b/lab_results/random_shellcode/jargon.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NTlkM2I2NjIzYzAwYmJkYTNhYjg1NzRjY2JmMDRjYjE6MTc0Nzc2NjQ5Mw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NTlkM2I2NjIzYzAwYmJkYTNhYjg1NzRjY2JmMDRjYjE6MTc0Nzc2NjQ5Mw==", + "item": "https://www.virustotal.com/api/v3/files/b6e295f35cd1ceb2b91be179bd611e19a565eb655f1928cfed90fe20ac221c26" + }, + "attributes": { + "date": 1747766493, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "malicious", + "result": "PUA.RiskWare.Lsassdumper" + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 3, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "b6e295f35cd1ceb2b91be179bd611e19a565eb655f1928cfed90fe20ac221c26", + "md5": "59d3b6623c00bbda3ab8574ccbf04cb1", + "sha1": "99e9c43ef2f81e02c51e5c4ad1810021d7d1d428", + "size": 146944 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/jigsaw.exe.json b/lab_results/random_shellcode/jigsaw.exe.json new file mode 100644 index 0000000..e645a8b --- /dev/null +++ b/lab_results/random_shellcode/jigsaw.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZDNhNWQ5OGFjYzdiNDFhZjdlYTZkNjIyZDNhYjdlOTA6MTc0Nzc2NjUzMw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZDNhNWQ5OGFjYzdiNDFhZjdlYTZkNjIyZDNhYjdlOTA6MTc0Nzc2NjUzMw==", + "item": "https://www.virustotal.com/api/v3/files/25162962d4870a2e46fe0e8cc685514ebc92d16c7f35c7fc62a707a40c00624a" + }, + "attributes": { + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766533, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "25162962d4870a2e46fe0e8cc685514ebc92d16c7f35c7fc62a707a40c00624a", + "md5": "d3a5d98acc7b41af7ea6d622d3ab7e90", + "sha1": "5f4395f35ac069f1fec10b8ef02a297f85f101b0", + "size": 140288 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/noobfuscation.exe.json b/lab_results/random_shellcode/noobfuscation.exe.json new file mode 100644 index 0000000..54f0a28 --- /dev/null +++ b/lab_results/random_shellcode/noobfuscation.exe.json @@ -0,0 +1,634 @@ +{ + "data": { + "id": "ZDliZTgxOGM0M2QzNGIxOGIzNTQ3ZDVlYzVkMGVmMjY6MTc0Nzc2NjU3Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZDliZTgxOGM0M2QzNGIxOGIzNTQ3ZDVlYzVkMGVmMjY6MTc0Nzc2NjU3Ng==", + "item": "https://www.virustotal.com/api/v3/files/59830e4a927aa6ad3de6daf65918703e873ce355dd2f9a0d5d251ce8165d82c1" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 69, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766576, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "59830e4a927aa6ad3de6daf65918703e873ce355dd2f9a0d5d251ce8165d82c1", + "md5": "d9be818c43d34b18b3547d5ec5d0ef26", + "sha1": "99176f9f7d04f91264ec3cbc66c681cab8f1e361", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/offset.exe.json b/lab_results/random_shellcode/offset.exe.json new file mode 100644 index 0000000..6dacebc --- /dev/null +++ b/lab_results/random_shellcode/offset.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MDAxNjY2MzgyZTExNjUwZmFmZDUwNTY5ZGY0MzVmZGQ6MTc0Nzc2NjYxNQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MDAxNjY2MzgyZTExNjUwZmFmZDUwNTY5ZGY0MzVmZGQ6MTc0Nzc2NjYxNQ==", + "item": "https://www.virustotal.com/api/v3/files/51bc7cf625650f13c90605823e75049ef5761e5ff347eda1a8d586151484a38e" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766615 + } + }, + "meta": { + "file_info": { + "sha256": "51bc7cf625650f13c90605823e75049ef5761e5ff347eda1a8d586151484a38e", + "md5": "001666382e11650fafd50569df435fdd", + "sha1": "4d4f04ec38f57b635fce663c972905c8df2d7167", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/rc4api.exe.json b/lab_results/random_shellcode/rc4api.exe.json new file mode 100644 index 0000000..fa02846 --- /dev/null +++ b/lab_results/random_shellcode/rc4api.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZTEwNGU5OTE1N2NhOTY0MDEyZmFhYjBiZDI2NTYzOTY6MTc0Nzc2NjY1OA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZTEwNGU5OTE1N2NhOTY0MDEyZmFhYjBiZDI2NTYzOTY6MTc0Nzc2NjY1OA==", + "item": "https://www.virustotal.com/api/v3/files/fccf4bef0e4baf87c186f5ce7217b20bd2425e3122eb8a8de2e1d679094354cd" + }, + "attributes": { + "status": "completed", + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "timeout", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766658, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 68, + "harmless": 0, + "timeout": 2, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + } + } + }, + "meta": { + "file_info": { + "sha256": "fccf4bef0e4baf87c186f5ce7217b20bd2425e3122eb8a8de2e1d679094354cd", + "md5": "e104e99157ca964012faab0bd2656396", + "sha1": "b77a68598b8210877d03b71d9dee411269c7b05c", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/reverse_byte_order.exe.json b/lab_results/random_shellcode/reverse_byte_order.exe.json new file mode 100644 index 0000000..da33ee9 --- /dev/null +++ b/lab_results/random_shellcode/reverse_byte_order.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ODk1YjFhMWQwMzY2NTljM2RmOTU5ZGMwMDE5ZjI3OTI6MTc0Nzc2NjczOQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ODk1YjFhMWQwMzY2NTljM2RmOTU5ZGMwMDE5ZjI3OTI6MTc0Nzc2NjczOQ==", + "item": "https://www.virustotal.com/api/v3/files/06b773b4ac86abedc474bb113e64c7ce68829618ba095f33368f3c37351edbae" + }, + "attributes": { + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed", + "date": 1747766739 + } + }, + "meta": { + "file_info": { + "sha256": "06b773b4ac86abedc474bb113e64c7ce68829618ba095f33368f3c37351edbae", + "md5": "895b1a1d036659c3df959dc0019f2792", + "sha1": "c7add531c2405447f73eada8286158a120d6c8f9", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/reverse_hex_string.exe.json b/lab_results/random_shellcode/reverse_hex_string.exe.json new file mode 100644 index 0000000..2ff2876 --- /dev/null +++ b/lab_results/random_shellcode/reverse_hex_string.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "NzUxOTc4ZDNmMjkxMDJiYzI2OTRkZTE2ZDdlMzBlZDk6MTc0Nzc2Njc4MQ==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/NzUxOTc4ZDNmMjkxMDJiYzI2OTRkZTE2ZDdlMzBlZDk6MTc0Nzc2Njc4MQ==", + "item": "https://www.virustotal.com/api/v3/files/3e6b1dc6d94cabb1c89735dbcf24e2f85aa3b1e4e94c01fcad9e7ecb99b32e5f" + }, + "attributes": { + "date": 1747766781, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "3e6b1dc6d94cabb1c89735dbcf24e2f85aa3b1e4e94c01fcad9e7ecb99b32e5f", + "md5": "751978d3f29102bc2694de16d7e30ed9", + "sha1": "b1ca6e63cfd168fef12ccd7bc7fd2ce8083d2c4e", + "size": 141824 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/scan_results.txt b/lab_results/random_shellcode/scan_results.txt new file mode 100644 index 0000000..ad3a1b4 --- /dev/null +++ b/lab_results/random_shellcode/scan_results.txt @@ -0,0 +1,18 @@ +aes.exe: 5 +base64.exe: 3 +base64api.exe: 5 +bin2ip.exe: 8 +bin2mac.exe: 8 +caesar.exe: 2 +jargon.exe: 3 +jigsaw.exe: 2 +noobfuscation.exe: 2 +offset.exe: 2 +rc4api.exe: 2 +reverse_byte_order.exe: 2 +reverse_hex_string.exe: 2 +twoarray.exe: 2 +uuidapi.exe: 8 +xor_multibyte.exe: 1 +xor_reverse.exe: 2 +xor_single.exe: 1 diff --git a/lab_results/random_shellcode/twoarray.exe.json b/lab_results/random_shellcode/twoarray.exe.json new file mode 100644 index 0000000..dbff390 --- /dev/null +++ b/lab_results/random_shellcode/twoarray.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZWQwMmRkYzIzNGI2MTdlOTkyZmY0NmU1N2FjN2M0YzY6MTc0Nzc2NjgxNw==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZWQwMmRkYzIzNGI2MTdlOTkyZmY0NmU1N2FjN2M0YzY6MTc0Nzc2NjgxNw==", + "item": "https://www.virustotal.com/api/v3/files/82e7eadcc4e0eeb7bb8e60f2cde44904fff8d71a9be8b7095c46aa55c43823b3" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.4.11.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.10.0.2", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747766817 + } + }, + "meta": { + "file_info": { + "sha256": "82e7eadcc4e0eeb7bb8e60f2cde44904fff8d71a9be8b7095c46aa55c43823b3", + "md5": "ed02ddc234b617e992ff46e57ac7c4c6", + "sha1": "d84e3e8ba4c84abe62f56a43558712ab3f9fbe12", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/uuidapi.exe.json b/lab_results/random_shellcode/uuidapi.exe.json new file mode 100644 index 0000000..37bfe80 --- /dev/null +++ b/lab_results/random_shellcode/uuidapi.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZjZhYzkzMTI4YjFiMGM5NDRmNTU5ZmQ1ZjhjNWIwYTQ6MTc0Nzc2Njg1Mg==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZjZhYzkzMTI4YjFiMGM5NDRmNTU5ZmQ1ZjhjNWIwYTQ6MTc0Nzc2Njg1Mg==", + "item": "https://www.virustotal.com/api/v3/files/1eaa54e18b4837746885cdc98b1900281707d15484af488e55faf3c3c45dbd48" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "malicious", + "result": "malicious (high confidence)" + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "malicious", + "result": "Trojan.Win32.Save.a" + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "malicious", + "result": "win/malicious_confidence_70% (D)" + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "malicious", + "result": "ti!1EAA54E18B48" + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "malicious", + "result": "Static AI - Suspicious PE" + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "malicious", + "result": "Trojan.Malware.300983.susgen" + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "stats": { + "malicious": 8, + "suspicious": 0, + "undetected": 64, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed", + "date": 1747766852 + } + }, + "meta": { + "file_info": { + "sha256": "1eaa54e18b4837746885cdc98b1900281707d15484af488e55faf3c3c45dbd48", + "md5": "f6ac93128b1b0c944f559fd5f8c5b0a4", + "sha1": "c636796f1a77f44ef69be732bd3226c2fbb8311e", + "size": 140288 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_multibyte.exe.json b/lab_results/random_shellcode/xor_multibyte.exe.json new file mode 100644 index 0000000..862d093 --- /dev/null +++ b/lab_results/random_shellcode/xor_multibyte.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "MDMwZWRlZDI5MTg3YWRjYTcxOWJiMTBkMDFlYTUyZTY6MTc0Nzc2Njk0NA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/MDMwZWRlZDI5MTg3YWRjYTcxOWJiMTBkMDFlYTUyZTY6MTc0Nzc2Njk0NA==", + "item": "https://www.virustotal.com/api/v3/files/e085620f240f450b7154a1bbe95f6383581401ccf940479bf18a89d49fae1f9a" + }, + "attributes": { + "status": "completed", + "stats": { + "malicious": 1, + "suspicious": 0, + "undetected": 71, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "date": 1747766944, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + } + } + }, + "meta": { + "file_info": { + "sha256": "e085620f240f450b7154a1bbe95f6383581401ccf940479bf18a89d49fae1f9a", + "md5": "030eded29187adca719bb10d01ea52e6", + "sha1": "fbffc789dcc05c260046d052428d36bab88ebaf3", + "size": 149504 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_reverse.exe.json b/lab_results/random_shellcode/xor_reverse.exe.json new file mode 100644 index 0000000..76f2a3b --- /dev/null +++ b/lab_results/random_shellcode/xor_reverse.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "ZjY3ZGVlNjE4ODA1MTM2YTFkN2UzNDAzYmZjMjg5ZDk6MTc0Nzc2Njk4Ng==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/ZjY3ZGVlNjE4ODA1MTM2YTFkN2UzNDAzYmZjMjg5ZDk6MTc0Nzc2Njk4Ng==", + "item": "https://www.virustotal.com/api/v3/files/8573d88b680c496a2121e503f010f345a75cc53def656dda2b4ffd3f83264f57" + }, + "attributes": { + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": "22.00", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": "v2021.2.0+4045", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "undetected", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": "5.3.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "malicious", + "result": "MALICIOUS" + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "date": 1747766986, + "stats": { + "malicious": 2, + "suspicious": 0, + "undetected": 70, + "harmless": 0, + "timeout": 0, + "confirmed-timeout": 0, + "failure": 0, + "type-unsupported": 4 + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "8573d88b680c496a2121e503f010f345a75cc53def656dda2b4ffd3f83264f57", + "md5": "f67dee618805136a1d7e3403bfc289d9", + "sha1": "666e7b918691ca08b2bbb5642a18392d4107a737", + "size": 139776 + } + } +} \ No newline at end of file diff --git a/lab_results/random_shellcode/xor_single.exe.json b/lab_results/random_shellcode/xor_single.exe.json new file mode 100644 index 0000000..45f728f --- /dev/null +++ b/lab_results/random_shellcode/xor_single.exe.json @@ -0,0 +1,642 @@ +{ + "data": { + "id": "YTc5YWVjNmQ3YThkMDk3NmIyYTllNjRiNjQwYjBjZjU6MTc0Nzc2NzA3MA==", + "type": "analysis", + "links": { + "self": "https://www.virustotal.com/api/v3/analyses/YTc5YWVjNmQ3YThkMDk3NmIyYTllNjRiNjQwYjBjZjU6MTc0Nzc2NzA3MA==", + "item": "https://www.virustotal.com/api/v3/files/dce65f4b9ee4329d759e090c995dc8281b9e2efd0da2f4db89e45896d7acd201" + }, + "attributes": { + "date": 1747767070, + "stats": { + "malicious": 1, + "suspicious": 0, + "undetected": 51, + "harmless": 0, + "timeout": 18, + "confirmed-timeout": 1, + "failure": 1, + "type-unsupported": 4 + }, + "results": { + "Bkav": { + "method": "blacklist", + "engine_name": "Bkav", + "engine_version": "2.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Lionic": { + "method": "blacklist", + "engine_name": "Lionic", + "engine_version": "8.16", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Elastic": { + "method": "blacklist", + "engine_name": "Elastic", + "engine_version": "4.0.204", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MicroWorld-eScan": { + "method": "blacklist", + "engine_name": "MicroWorld-eScan", + "engine_version": "14.0.409.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ClamAV": { + "method": "blacklist", + "engine_name": "ClamAV", + "engine_version": "1.4.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CMC": { + "method": "blacklist", + "engine_name": "CMC", + "engine_version": "2.4.2022.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ALYac": { + "method": "blacklist", + "engine_name": "ALYac", + "engine_version": "2.0.0.10", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Malwarebytes": { + "method": "blacklist", + "engine_name": "Malwarebytes", + "engine_version": "4.5.5.54", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Sangfor": { + "method": "blacklist", + "engine_name": "Sangfor", + "engine_version": "2.22.3.0", + "engine_update": "20250514", + "category": "undetected", + "result": null + }, + "K7AntiVirus": { + "method": "blacklist", + "engine_name": "K7AntiVirus", + "engine_version": "12.238.55812", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "K7GW": { + "method": "blacklist", + "engine_name": "K7GW", + "engine_version": "12.238.55811", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "CrowdStrike": { + "method": "blacklist", + "engine_name": "CrowdStrike", + "engine_version": "1.0", + "engine_update": "20231026", + "category": "undetected", + "result": null + }, + "Baidu": { + "method": "blacklist", + "engine_name": "Baidu", + "engine_version": "1.0.0.2", + "engine_update": "20190318", + "category": "undetected", + "result": null + }, + "VirIT": { + "method": "blacklist", + "engine_name": "VirIT", + "engine_version": "9.5.958", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Symantec": { + "method": "blacklist", + "engine_name": "Symantec", + "engine_version": "1.22.0.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "tehtris": { + "method": "blacklist", + "engine_name": "tehtris", + "engine_version": "v0.1.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ESET-NOD32": { + "method": "blacklist", + "engine_name": "ESET-NOD32", + "engine_version": "31229", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "APEX": { + "method": "blacklist", + "engine_name": "APEX", + "engine_version": "6.656", + "engine_update": "20250519", + "category": "malicious", + "result": "Malicious" + }, + "TrendMicro-HouseCall": { + "method": "blacklist", + "engine_name": "TrendMicro-HouseCall", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Paloalto": { + "method": "blacklist", + "engine_name": "Paloalto", + "engine_version": "0.9.0.1003", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cynet": { + "method": "blacklist", + "engine_name": "Cynet", + "engine_version": "4.0.3.4", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Alibaba": { + "method": "blacklist", + "engine_name": "Alibaba", + "engine_version": "0.3.0.5", + "engine_update": "20190527", + "category": "undetected", + "result": null + }, + "NANO-Antivirus": { + "method": "blacklist", + "engine_name": "NANO-Antivirus", + "engine_version": "1.0.170.26710", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ViRobot": { + "method": "blacklist", + "engine_name": "ViRobot", + "engine_version": "2014.3.20.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "F-Secure": { + "method": "blacklist", + "engine_name": "F-Secure", + "engine_version": "18.10.1547.307", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "VIPRE": { + "method": "blacklist", + "engine_name": "VIPRE", + "engine_version": "6.0.0.35", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "TrendMicro": { + "method": "blacklist", + "engine_name": "TrendMicro", + "engine_version": "24.550.0.1002", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "McAfeeD": { + "method": "blacklist", + "engine_name": "McAfeeD", + "engine_version": "1.2.0.10275", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SentinelOne": { + "method": "blacklist", + "engine_name": "SentinelOne", + "engine_version": "25.1.1.1", + "engine_update": "20250114", + "category": "undetected", + "result": null + }, + "Trapmine": { + "method": "blacklist", + "engine_name": "Trapmine", + "engine_version": "4.0.4.0", + "engine_update": "20250515", + "category": "undetected", + "result": null + }, + "Ikarus": { + "method": "blacklist", + "engine_name": "Ikarus", + "engine_version": "6.3.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Jiangmin": { + "method": "blacklist", + "engine_name": "Jiangmin", + "engine_version": "16.0.100", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Webroot": { + "method": "blacklist", + "engine_name": "Webroot", + "engine_version": "1.9.0.8", + "engine_update": "20250227", + "category": "undetected", + "result": null + }, + "Avira": { + "method": "blacklist", + "engine_name": "Avira", + "engine_version": "8.3.3.20", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Antiy-AVL": { + "method": "blacklist", + "engine_name": "Antiy-AVL", + "engine_version": "3.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Kingsoft": { + "method": "blacklist", + "engine_name": "Kingsoft", + "engine_version": "None", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Gridinsoft": { + "method": "blacklist", + "engine_name": "Gridinsoft", + "engine_version": "1.0.216.174", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Xcitium": { + "method": "blacklist", + "engine_name": "Xcitium", + "engine_version": "37740", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Microsoft": { + "method": "blacklist", + "engine_name": "Microsoft", + "engine_version": "1.1.25040.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "SUPERAntiSpyware": { + "method": "blacklist", + "engine_name": "SUPERAntiSpyware", + "engine_version": "5.6.0.1032", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "ZoneAlarm": { + "method": "blacklist", + "engine_name": "ZoneAlarm", + "engine_version": "6.16-103870732", + "engine_update": "20250519", + "category": "undetected", + "result": null + }, + "Google": { + "method": "blacklist", + "engine_name": "Google", + "engine_version": "1747762223", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "AhnLab-V3": { + "method": "blacklist", + "engine_name": "AhnLab-V3", + "engine_version": "3.27.2.10550", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "TACHYON": { + "method": "blacklist", + "engine_name": "TACHYON", + "engine_version": "2025-05-20.02", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Cylance": { + "method": "blacklist", + "engine_name": "Cylance", + "engine_version": "3.0.0.0", + "engine_update": "20250424", + "category": "undetected", + "result": null + }, + "Zoner": { + "method": "blacklist", + "engine_name": "Zoner", + "engine_version": "2.2.2.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Tencent": { + "method": "blacklist", + "engine_name": "Tencent", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Yandex": { + "method": "blacklist", + "engine_name": "Yandex", + "engine_version": "5.5.2.24", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "huorong": { + "method": "blacklist", + "engine_name": "huorong", + "engine_version": "6320f8c:6320f8c:5bf6b40:5bf6b40", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "MaxSecure": { + "method": "blacklist", + "engine_name": "MaxSecure", + "engine_version": "1.0.0.1", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "Fortinet": { + "method": "blacklist", + "engine_name": "Fortinet", + "engine_version": "7.0.30.0", + "engine_update": "20250520", + "category": "undetected", + "result": null + }, + "alibabacloud": { + "method": "blacklist", + "engine_name": "alibabacloud", + "engine_version": "2.2.0", + "engine_update": "20250321", + "category": "undetected", + "result": null + }, + "DrWeb": { + "method": "blacklist", + "engine_name": "DrWeb", + "engine_version": "7.0.67.2170", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "GData": { + "method": "blacklist", + "engine_name": "GData", + "engine_version": "GD:27.40396AVA:64.29222", + "engine_update": "20250520", + "category": "confirmed-timeout", + "result": null + }, + "Varist": { + "method": "blacklist", + "engine_name": "Varist", + "engine_version": "6.6.1.3", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Acronis": { + "method": "blacklist", + "engine_name": "Acronis", + "engine_version": "1.2.0.121", + "engine_update": "20240328", + "category": "timeout", + "result": null + }, + "VBA32": { + "method": "blacklist", + "engine_name": "VBA32", + "engine_version": null, + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Emsisoft": { + "method": "blacklist", + "engine_name": "Emsisoft", + "engine_version": "2024.8.0.61147", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Sophos": { + "method": "blacklist", + "engine_name": "Sophos", + "engine_version": "3.0.3.0", + "engine_update": "20250519", + "category": "timeout", + "result": null + }, + "CTX": { + "method": "blacklist", + "engine_name": "CTX", + "engine_version": "2024.8.29.1", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "CAT-QuickHeal": { + "method": "blacklist", + "engine_name": "CAT-QuickHeal", + "engine_version": null, + "engine_update": "20250519", + "category": "timeout", + "result": null + }, + "Kaspersky": { + "method": "blacklist", + "engine_name": "Kaspersky", + "engine_version": "22.0.1.28", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "BitDefender": { + "method": "blacklist", + "engine_name": "BitDefender", + "engine_version": "7.2", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Skyhigh": { + "method": "blacklist", + "engine_name": "Skyhigh", + "engine_version": null, + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "McAfee": { + "method": "blacklist", + "engine_name": "McAfee", + "engine_version": "6.0.6.653", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Zillya": { + "method": "blacklist", + "engine_name": "Zillya", + "engine_version": "2.0.0.5364", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Rising": { + "method": "blacklist", + "engine_name": "Rising", + "engine_version": "25.0.0.28", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Avast": { + "method": "blacklist", + "engine_name": "Avast", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "AVG": { + "method": "blacklist", + "engine_name": "AVG", + "engine_version": "23.9.8494.0", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Panda": { + "method": "blacklist", + "engine_name": "Panda", + "engine_version": "4.6.4.2", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "Arcabit": { + "method": "blacklist", + "engine_name": "Arcabit", + "engine_version": "2022.0.0.18", + "engine_update": "20250520", + "category": "timeout", + "result": null + }, + "DeepInstinct": { + "method": "blacklist", + "engine_name": "DeepInstinct", + "engine_version": "5.0.0.8", + "engine_update": "20250520", + "category": "failure", + "result": null + }, + "Trustlook": { + "method": "blacklist", + "engine_name": "Trustlook", + "engine_version": "1.0", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + }, + "SymantecMobileInsight": { + "method": "blacklist", + "engine_name": "SymantecMobileInsight", + "engine_version": "2.0", + "engine_update": "20250124", + "category": "type-unsupported", + "result": null + }, + "BitDefenderFalx": { + "method": "blacklist", + "engine_name": "BitDefenderFalx", + "engine_version": "2.0.936", + "engine_update": "20250416", + "category": "type-unsupported", + "result": null + }, + "Avast-Mobile": { + "method": "blacklist", + "engine_name": "Avast-Mobile", + "engine_version": "250520-06", + "engine_update": "20250520", + "category": "type-unsupported", + "result": null + } + }, + "status": "completed" + } + }, + "meta": { + "file_info": { + "sha256": "dce65f4b9ee4329d759e090c995dc8281b9e2efd0da2f4db89e45896d7acd201", + "md5": "a79aec6d7a8d0976b2a9e64b640b0cf5", + "sha1": "b964e2215abff22e38d70ac2e1e6836707510548", + "size": 139776 + } + } +} \ No newline at end of file