Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
The file 5c84e0317d7744299d3b6b9bbce20ba0 is a ZIP Archive for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 34 embedded or derived files. It matches 43 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.003, T1202: INDIRECT COMMAND EXECUTION and T1204.002. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Malicious
- File type
- ZIP Archive
- Category
- LOLBin
- MITRE ATT&CK
- T1059.003T1202: INDIRECT COMMAND EXECUTIONT1204.002
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
25 malicious · 31 files
ZIP5c84e0317d7744299d3b6b9bbce20ba0T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKdvr Predator.Badlands.2025.2160p.BluRay.DTS-HD.MA.5.1.HDR.HEVC-EVO.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
ZIPPredator Badlands 2025 2160p.braw
SRTsubtitles.srt
PS1subtitlesss.braw
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
BIN[Base64-Block]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN[Base64-Block]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
BIN[Base64-Block]
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential