Malicious ZIP Archive analysis – 56e55a9c3015

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

4 malicious · 91 files

ZIP56e55a9c301543128a109a17038a1db2

OFF4NOT45-RmJ1-6OsO6-F17.msi

BINRoot Entry

EXEnevasca.exe

DLL__.dll

Structure

BINResources

BIN.Net Resources

BIN___22.22.22.22.nrmap

EXE__.dll_6

Structure

BINResources

BIN.Net Resources

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #16 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #17 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #18 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #19 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential