Ctrl + scroll to zoom · drag to pan
The file faa07de0cff3dcc6655b76d879b2585c6908f72d77b03bed64d0dcb5297e2ece.zip is a ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 5 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.001, T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Malicious
- File type
- ZIP Archive
- Category
- LOLBin
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
6 malicious · 6 files
ZIPfaa07de0cff3dcc6655b76d879b2585c6908f72d77b03bed64d0dcb5297e2ece.zipT1059.001 · T1059.003 · T1204.002LOLBin
LNKfaa07de0cff3dcc6655b76d879b2585c6908f72d77b03bed64d0dcb5297e2ece.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Lnk Summary]
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential