{% extends "base.html" %} {% load staticfiles %} {% load analysis_tags %} {% block content %}
{% include "analysis/pages/nav-sidebar.html" %}
{% if report.analysis.debug.errors %} {% include "analysis/pages/summary/_errors.html" %} {% endif %} {% if report.analysis.info.category == "file" and report.analysis.target %} {% include "analysis/pages/summary/_file.html" %} {% elif report.analysis.info.category == "archive" and report.analysis.target %} {% include "analysis/pages/summary/_archive.html" %} {% elif report.analysis.info.category == "url" %} {% include "analysis/pages/summary/_url.html" %} {% endif %}

Score

{% if report.analysis.info.score < 1 %}
This {{ report.analysis.info.category }} appears fairly benign with a score of {{ report.analysis.info.score }} out of 10.
{% elif report.analysis.info.score < 2 %}

This {{ report.analysis.info.category }} shows some signs of potential malicious behavior.

The score of this {{ report.analysis.info.category }} is {{ report.analysis.info.score }} out of 10.

{% elif report.analysis.info.score < 5 %}
This {{ report.analysis.info.category }} shows numerous signs of malicious behavior.

The score of this {{ report.analysis.info.category }} is {{ report.analysis.info.score }} out of 10.
{% else %}

This {{ report.analysis.info.category }} is very suspicious, with a score of {{ report.analysis.info.score }} out of 10!

{% endif %}

Please notice: The scoring system is currently still in development and should be considered an alpha feature.


{% if report.analysis.metadata and report.analysis.metadata.cfgextr %}

Malware Configuration

{% for cfgextr in report.analysis.metadata.cfgextr %}
family

{{ cfgextr.family }}

    {% if cfgextr.campaign %}
  • Campaign

    {{ cfgextr.campaign }}

  • {% endif %} {% if cfgextr.cnc %}
  • CnC
      {% for url in cfgextr.cnc %}
    • {{ url }}
    • {% endfor %}
  • {% endif %} {% if cfgextr.url %}
  • URLs
      {% for url in cfgextr.url %}
    • {{ url }}
    • {% endfor %}
  • {% endif %} {% if cfgextr.key %}
  • {% for pubkey in cfgextr.key.pubkey %} Public Key

    {{ pubkey }}

    {% endfor %} {% for privkey in cfgextr.key.privkey %} Private Key

    {{ privkey }}

    {% endfor %} {% for des3key in cfgextr.key.des3key %} Triple DES Key

    {{ des3key }}

    {% endfor %} {% for rc4key in cfgextr.key.rc4key %} RC4 Key

    {{ rc4key }}

    {% endfor %} {% for xorkey in cfgextr.key.xorkey %} XOR Key

    {{ xorkey }}

    {% endfor %}
  • {% endif %} {% if cfgextr.type %}
  • Package / Type

    {{ cfgextr.type }}

  • {% endif %}
{% endfor %}
{% endif %}

Feedback

{% if report.analysis.feedback %} Feedback sent on {{ report.analysis.feedback.date }} Thanks! {% else %} Expecting different results? Send us this analysis and we will inspect it. Click here {% endif %}

{% include "analysis/pages/summary/_info.html" %}
{% include "analysis/pages/summary/_signatures.html" %}
{% include "analysis/pages/summary/_screenshots.html" %}
{% include "analysis/pages/network/_dns.html" %}
{% include "analysis/pages/network/_hosts.html" %}
{% endblock %}