Suspicious
Suspect

305eefa85968ee33d362cfd2f87bdb89

ZIP Archive
MD5: 305eefa85968ee33d362cfd2f87bdb89
Size: 1.54 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 305eefa85968ee33d362cfd2f87bdb89
Sha1 5681e7d3c93f61a33eda4bc1b4db5cab938f0c3d
Sha256 7ca026915d697c052ce56cb6024ef7d11b30155694642b374b29c3ea23be5ec8
Sha384 d321792c1890f7b429b97cfbd6c740c8afa24d8565f14ed017e829fe5284c3434158f28343e4d2804ab82d02a26ae094
Sha512 4e84ffcc9073c4cb2155d6ec5e0f615751e91a6a1fae595cbb79cc59bdc6cfbcc79ba7470d99a1f5bf97f9f3adf892b52a0eebbfb75fa08d0964c8360ae4f11d
SSDeep 24576:ik7SDVrTjaYRz9P4vnMuUFkc7kNqhb6k7SDVrTjaYRz9P4vnMuUFkc7kN2h8:376XuYRz9P4fMLku76XuYRz9P4fMLk7
TLSH 2D65337ECBB86BE5C7D45194B0BAF7EE5DA0E8A6240DF365F6C0260036396D50612F32
305eefa85968ee33d362cfd2f87bdb89
DDOS
File
hold.js
ua.txt
mix.js
proxy.txt
AVA.js
scrape.py
package.json
package-lock.json
.bashrc
avatar.js
main.py
proxy.txt
http-supernova.js
.bash_history
package-lock.json
.Xauthority
.profile
.cloud-locale-test.skip
.wget-hsts
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
305eefa85968ee33d362cfd2f87bdb89
DDOS
File
hold.js
ua.txt
mix.js
proxy.txt
AVA.js
scrape.py
package.json
package-lock.json
.bashrc
avatar.js
main.py
proxy.txt
http-supernova.js
.bash_history
package-lock.json
.Xauthority
.profile
.cloud-locale-test.skip
.wget-hsts
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙