Uncover Unknown Malware Using SSDeep

Uncover Unknown Malware Using SSDeep Incident

Details

IDUncover Unknown Malware Using SSDeep
Groupincident
Version-1
From Version6.5.0

Layout Structure

Legacy Summary 0 sections

No sections defined.

Uncover Unknown Malware 8 sections

File Metadata

Field IDPosition
filemd5 Col 0-2, Height: 53
filesha256 Col 0-2, Height: 53
ssdeep Col 0-2, Height: 53

Related Entities

Field IDPosition
numberofsimilarfiles Col 0-2, Height: 22
relatedendpoints Col 0-2, Height: 22
numberofrelatedincident Col 2-4, Height: 22
numberofrelatedincidents Col 2-4, Height: 22

Threat Details

Field IDPosition
verdict Col 0-2, Height: 22
analysisreport Col 0-2, Height: 22
malwarefamily Col 2-4, Height: 22

VirusTotal Community Notes

Relationships with Other Indicators

Field IDPosition
filerelationships Col 0-2, Height: 106

Files with High Similarity

Field IDPosition
similarfilehashesbasedonssdeep Col 0-4, Height: 106

Discovered Similar Hashes

Shows related hashes that were discovered through SSDeep similarity check. These hashes have an SSDeep hash that was found similar to that of the input hash.

Field IDPosition
additionalindicators Col 0-2, Height: 53

Linked Incidents

Incident Info 11 sections

Case Details

Field IDPosition
type Col 0-2, Height: 22
severity Col 0-2, Height: 22
owner Col 0-2, Height: 22
sourcebrand Col 0-2, Height: 22
sourceinstance Col 0-2, Height: 22
playbookid Col 0-2, Height: 22

Notes

Work Plan

Linked Incidents

Child Incidents

Evidence

Team Members

Indicators

Timeline Information

Field IDPosition
occurred Col 0-1, Height: 22
dbotmodified Col 0-1, Height: 22
dbotduedate Col 0-2, Height: 22
dbotcreated Col 1-2, Height: 22
dbotclosed Col 1-2, Height: 22

Closing Information

Field IDPosition
dbotclosed Col 0-2, Height: 22
closereason Col 0-2, Height: 22
closenotes Col 0-2, Height: 22

Investigation Data

Field IDPosition
details Col 0-2, Height: 22
War Room 0 sections

No sections defined.

Work Plan 0 sections

No sections defined.

Evidence Board 0 sections

No sections defined.

Related Incidents 0 sections

No sections defined.

Canvas 0 sections

No sections defined.