Malicious
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
7 malicious · 36 files
ZIP2bdf66459b30612e0826a3312c754c54T1059.005
EXECassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf.exeT1059.005
Structure
RAROverlay_583131d1.binT1059.005
PDFCassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf
VBSHideMake.vbs
VBSDwn.vbeT1059.005
VBSDwn.vbe.decoded.vbsT1059.005
VBSDwn.vbe.decoded.vbs.deobfuscated.vbsT1059.005
BATclean.bat
BATmake.bat
BINResources
| Name | Value |
|---|---|
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | 1.3 |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | D:20170215083144+02'00' |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | D:20170215083144+02'00' |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | null |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | null |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | — |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | D:20170215083144+02'00' |
| Cassetto_Previdenziale-DE_JESUS_MILAGROS-BEROYA-FILIPPINE_RP-DJSMGR73S51Z216Z.pdf | D:20170215083144+02'00' |
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential