Request:
curl -H "Authorization: Bearer <API_KEY>" https://api.maltiverse.com/sample/eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024
Response:
{
"blacklist": [
{
"count": 6,
"description": "Generic Malware",
"first_seen": "2025-06-24 02:45:12",
"last_seen": "2025-06-24 03:00:43",
"ref": [
21745
],
"source": "Hybrid-Analysis"
}
],
"classification": "malicious",
"contacted_host": [
"16.58.6.158",
"4.240.75.245",
"16.129.13.21",
"188.166.95.178",
"151.101.0.223",
"172.253.62.27",
"142.250.102.26",
"16.37.2.208",
"64.190.63.222",
"209.202.254.10",
"142.251.41.4",
"98.136.144.138",
"173.194.76.27",
"172.253.116.27",
"192.178.156.27",
"140.82.113.4",
"185.70.42.129",
"185.70.42.128",
"199.189.200.28",
"162.55.254.98",
"199.189.200.32",
"216.198.79.1",
"115.240.58.62",
"171.64.64.64",
"171.64.64.26",
"171.64.64.25",
"171.64.64.160",
"140.82.113.32",
"104.248.224.170",
"138.197.213.185",
"167.99.129.72",
"202.12.124.217",
"217.69.139.150",
"103.129.252.44",
"217.69.139.202",
"47.251.116.62",
"111.124.203.38",
"103.129.252.88",
"103.129.252.46",
"16.91.196.218",
"15.172.2.91",
"16.115.192.158",
"17.171.208.6",
"17.57.170.2",
"17.56.176.6",
"17.23.14.18",
"192.254.190.168",
"65.108.131.22",
"64.29.151.236",
"121.127.44.59",
"194.104.110.22",
"51.81.232.218",
"202.12.124.216",
"51.81.61.71",
"147.135.98.120",
"51.81.61.70",
"209.86.122.183",
"194.104.108.22",
"20.172.142.146",
"128.232.119.160",
"45.60.122.119",
"16.150.197.22",
"94.100.180.31",
"94.100.180.201",
"47.251.170.165",
"94.100.180.87",
"94.100.180.70",
"17.57.165.2",
"45.60.132.119",
"121.127.44.56",
"172.253.116.26",
"173.194.76.26",
"142.251.163.27",
"142.250.102.27",
"192.178.156.26",
"140.82.113.3",
"151.101.192.223",
"103.168.172.218",
"140.82.113.31",
"176.119.200.128",
"185.205.70.129",
"103.168.172.47",
"217.69.139.200",
"103.129.252.60",
"52.101.42.13",
"85.187.148.2",
"212.27.48.7",
"3.222.182.102",
"160.16.115.170",
"140.78.3.82",
"52.26.125.194",
"212.27.42.59",
"212.27.48.10",
"140.78.3.83",
"212.27.48.6",
"140.78.3.69",
"140.78.3.68",
"217.69.139.87",
"212.27.48.4",
"16.188.113.226",
"34.196.82.207",
"104.18.22.19",
"52.101.41.0"
],
"creation_time": "2025-06-24 02:17:35",
"dns_request": [
"4.17.21",
"ASPMX2.GOOGLEMAIL.COM",
"ASPMX3.GOOGLEMAIL.COM",
"ASPMX4.GOOGLEMAIL.COM",
"ASPMX5.GOOGLEMAIL.COM",
"alexei.ro",
"alt1.aspmx.l.google.com",
"alt2.aspmx.l.google.com",
"alt3.aspmx.l.google.com",
"alt4.aspmx.l.google.com",
"aspmx.l.google.com",
"cs.stanford.edu",
"cscott.net",
"debuggable.com",
"github.com",
"hostname.com",
"in1-smtp.messagingengine.com",
"in2-smtp.messagingengine.com",
"juliangruber.com",
"kemitchell.com",
"kinoho.net",
"mail.alexei.ro",
"mail.cs.stanford.edu",
"mail.cscott.net",
"mail.debuggable.com",
"mail.github.com",
"mail.hostname.com",
"mail.juliangruber.com",
"mail.kinoho.net",
"mail.protonmail.ch",
"mail.python.org",
"mail.reg.ca",
"126.com",
"126mx00.mxmail.netease.com",
"126mx01.mxmail.netease.com",
"126mx02.mxmail.netease.com",
"126mx03.mxmail.netease.com",
"ALT3.ASPMX.L.GOOGLE.COM",
"ALT4.ASPMX.L.GOOGLE.COM",
"acm.org",
"aer-mx-01.cisco.com",
"aladdin.com",
"alinet.it",
"alln-mx-01.cisco.com",
"alumni-caltech-edu.mail.protection.outlook.com",
"alumni-purdue-edu.mail.protection.outlook.com",
"alumni.caltech.edu",
"alumni.purdue.edu",
"apple.com",
"ashi.footprints.net",
"aspmx2.googlemail.com",
"aspmx3.googlemail.com",
"athonet-com.mail.protection.outlook.com",
"athonet.com",
"baslug.org",
"bounce2.pobox.com",
"bryson.demon.co.uk",
"cisco.com",
"cl.cam.ac.uk",
"cmu.edu",
"cr0.net",
"cryptsoft.com",
"de-smtp-inbound-1.mimecast.com",
"de-smtp-inbound-2.mimecast.com",
"32767.se",
"ALT3.ASPMX.L.GOOGLE.com",
"ALT4.ASPMX.L.GOOGLE.com",
"alum-mit-edu.mail.protection.outlook.com",
"aspmx4.googlemail.com",
"aspmx5.googlemail.com",
"candelatech.com",
"charm.net",
"compuserve.com",
"coneharvesters.com",
"cpan.org",
"dei.uc.pt",
"dukhovni.org",
"eidolon.muppetlabs.com",
"elvis.murdoch.edu.au",
"fastmail.fm",
"gentoo.org",
"246tnt.com",
"a1721.mx.srv.dfn.de",
"aeriagames-com.mail.protection.outlook.com",
"aeriagames.com",
"agame.com",
"att.com",
"b1721.mx.srv.dfn.de"
],
"filename": [
"tmpA281.tmp"
],
"filetype": "PE32 executable (GUI) Intel 80386, for MS Windows, ...",
"is_alive": false,
"is_cdn": false,
"is_cnc": false,
"is_distributing_malware": false,
"is_hosting": false,
"is_iot_threat": false,
"is_known_attacker": false,
"is_known_scanner": false,
"is_mining_pool": false,
"is_open_proxy": false,
"is_phishing": false,
"is_sinkhole": false,
"is_storing_phishing": false,
"is_tor_node": false,
"is_vpn_node": false,
"md5": "6b637724dd8caac5760607c08060365c",
"modification_time": "2025-06-24 03:00:43",
"network_suricata_alert": [
{
"category": "Generic Protocol Command Decode",
"description": "SURICATA Applayer Detect protocol only one direction",
"event": "188.166.95.178:49780 (TCP)",
"sid": "2260002"
},
{
"category": "Generic Protocol Command Decode",
"description": "SURICATA Applayer Detect protocol only one direction",
"event": "194.104.108.22:49217 (TCP)",
"sid": "2260002"
},
{
"category": "Generic Protocol Command Decode",
"description": "SURICATA TCPv4 invalid checksum",
"event": "104.248.224.170:25 (TCP)",
"sid": "2200074"
},
{
"category": "Generic Protocol Command Decode",
"description": "SURICATA IPv4 invalid checksum",
"event": "173.194.76.27:25 (TCP)",
"sid": "2200073"
},
{
"category": "Generic Protocol Command Decode",
"description": "SURICATA Applayer Detect protocol only one direction",
"event": "173.194.76.26:49307 (TCP)",
"sid": "2260002"
}
],
"process_list": [
{
"name": "tmpA281.tmp.exe",
"normalizedpath": "C:\\tmpA281.tmp.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00005344"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00004480"
},
{
"name": "java.exe",
"normalizedpath": "%WINDIR%\\java.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00015920"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00015944"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00015276"
},
{
"name": "tmpA281.tmp.exe",
"normalizedpath": "C:\\tmpA281.tmp.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00003400"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00002108"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00007000"
},
{
"name": "java.exe",
"normalizedpath": "%WINDIR%\\java.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00007396"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00007468"
},
{
"name": "tmpA281.tmp.exe",
"normalizedpath": "C:\\tmpA281.tmp.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00003352"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00003640"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00006548"
},
{
"name": "java.exe",
"normalizedpath": "%WINDIR%\\java.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00007176"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00007172"
},
{
"name": "tmpA281.tmp.exe",
"normalizedpath": "C:\\tmpA281.tmp.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00009460"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00002748"
},
{
"name": "java.exe",
"normalizedpath": "%WINDIR%\\java.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00006632"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00000896"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00009348"
},
{
"name": "tmpA281.tmp.exe",
"normalizedpath": "C:\\tmpA281.tmp.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00004420"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00003188"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00001940"
},
{
"name": "java.exe",
"normalizedpath": "%WINDIR%\\java.exe",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"uid": "00000000-00002668"
},
{
"name": "services.exe",
"normalizedpath": "%WINDIR%\\services.exe",
"sha256": "bf316f51d0c345d61eaee3940791b64e81f676e3bca42bad61073227bee6653c",
"uid": "00000000-00002152"
}
],
"score": 10,
"scoring_executed_time": "2025-06-24 02:45:15",
"sha1": "bc4d3483e5efacddf5eaedaa6da67bbb5d7b3629",
"sha256": "eeda94e9fc7802bd8a26da08df9afa462cf1a5bfc98e3b15ed1377aa49366024",
"size": 28864,
"tag": [
"mydoom",
"suspicious"
],
"type": "sample"
}