Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
2 malicious · 5 files
ZIP15d79b10f2c5abe6c4781a3ddfaf7f03DcRat
EXEMalware.exeDcRat
Structure
BINOverlay_93b885ad.bin
BINResources
| Config. Field | Value |
|---|---|
| Key (AES_256) | VG0wNUhuhuhuhuhuhuhuhuhuhuhu |
| Pastebin | -huhuhuhu |
| Certificate | MIICMDhuhuhuhuhuhuhuhuhuhuhu |
| ServerSignature | ckle/Dhuhuhuhuhuhuhuhuhuhuhu |
| Install | thuhuhuhu |
| BDOS | fhuhuhuhu |
| Anti-VM | fhuhuhuhu |
| Install File | Cloudfhuhuhuhuhuhuhu |
| Install-Folder | %Aphuhuhuhu |
| Hosts | qq88.zhuhuhuhuhuhuhuhuhuhuhu |
| Ports | 80,443huhuhuhuhuhuhuhuhuhuhu |
| Mutex | DcRhuhuhuhu |
| Version | 1huhuhuhu |
| Delay | 1huhuhuhu |
| Group | Dehuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialKey (AES_256)
MUTEXmalicious
VG0wNUhuhuhuhuhuhuhuhuhuhuhu
CnC
CNCmalicious
qq8huhuhuhu
CnC
CNCmalicious
www.qhuhuhuhuhuhuhu
CnC
CNCmalicious
api.qhuhuhuhuhuhuhu
Ports
PORTmalicious
8huhuhuhu
Ports
PORTmalicious
4huhuhuhu
Ports
PORTmalicious
4huhuhuhu
Ports
PORTmalicious
4huhuhuhu
Ports
PORTmalicious
5huhuhuhu
Ports
PORTmalicious
6huhuhuhu
Ports
PORTmalicious
6huhuhuhu
Ports
PORTmalicious
8huhuhuhu
Ports
PORTmalicious
8huhuhuhu
Mutex
MUTEXmalicious
DcRhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential