Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
2 malicious · 653 files
ZIP66b91fe7132fd849e471de9233e711d9
BWIFreeb.bwi
BINLibrary
DLLMicrosoft.VisualStudio.Coverage.Symbols.dll
MAUPlieckthee.mau
DLLpython313.dll
BINResource
PHPT002.phpt
PHPT007_variation13.phpt
JSON1.json
PHPTbug46109.phpt
PHPTbug48289.phpt
PHPTbug63447_003.phpt
PHPTbug67429_1.phpt
PHPTbug81111.phpt
PHPTbug81351.phpt
ZIPbug81420.zip
BIN(folder)
PHPTcalendar_set_date_time.phpt
INCclicommand.inc
PHPTconst_dereference_002.phpt
BINCREDITS
PHPTdivmod.phpt
TXTents_html401.txt
PHPTexit_finally_2.phpt
PHPTfcgi-env-pif-apache-handler-with-query.phpt
PHPTfprintf_variation_008_64bit.phpt
Cgd_io_ss.c
PHPTgenerator_throwing_during_function_call.phpt
PHPTgh11171.phpt
PHPTinvalid_utf8_offset.phpt
Hmbfilter_htmlent.h
Hnormalizer_class.h
PHPTobserver_fiber_03.phpt
HTMLparser_warning_03.html
Hpcntl_arginfo.h
PHPTpcntl_realtime_signal.phpt
BINSREADME.REDIST.BINS
PHPTreadonly_clone_error7.phpt
Cshadow_root.c
PHPTspl_autoload_call_basic.phpt
PHPTtyped_properties_002.phpt
PHPTunlink_variation6.phpt
PHPTweak_include_strict.phpt
Czend_frameless_function.c
EXESetup.exe
BINUpdateLogs
BINUpdates
DLLVCRUNTIME140.dll
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
ZipSlip Path
PATHmalicious
/nt1/zhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
hthuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential