Malicious ZIP Archive analysis – 68f8610781c5

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

File

Type

ZIP archive

3 malicious · 92 files

ZIP68f8610781c5139df1a6bfd33e10f33a

OFF1fn45.7no05Ta99NT91.msi

BIN.

EXEnevasca.exe

DLLUberPenter.dll

Structure

BINResources

BIN.Net Resources

Config. Field	Value
URL #1	http:/huhuhuhuhuhuhu
URL #2	http:/huhuhuhuhuhuhuhuhuhuhu
URL #3	http:/huhuhuhuhuhuhuhuhuhuhu
URL #4	https:huhuhuhuhuhuhuhuhuhuhu
URL #5	https:huhuhuhuhuhuhuhuhuhuhu
URL #6	http:/huhuhuhuhuhuhuhuhuhuhu
URL #7	https:huhuhuhuhuhuhuhuhuhuhu
URL #8	http:/huhuhuhuhuhuhuhuhuhuhu
URL #9	http:/huhuhuhuhuhuhuhuhuhuhu
URL #10	http:/huhuhuhuhuhuhuhuhuhuhu
URL #11	http:/huhuhuhuhuhuhu
URL #12	http:/huhuhuhuhuhuhuhuhuhuhu
URL #13	http:/huhuhuhuhuhuhu
URL #14	http:/huhuhuhuhuhuhuhuhuhuhu
URL #15	http:/huhuhuhuhuhuhuhuhuhuhu
URL #16	http:/huhuhuhuhuhuhuhuhuhuhu
URL #17	https:huhuhuhuhuhuhuhuhuhuhu
URL #18	https:huhuhuhuhuhuhuhuhuhuhu
URL #19	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Config. Field	Value
URL #1	http:/huhuhuhuhuhuhu
URL #2	http:/huhuhuhuhuhuhuhuhuhuhu
URL #3	http:/huhuhuhuhuhuhuhuhuhuhu
URL #4	https:huhuhuhuhuhuhuhuhuhuhu
URL #5	https:huhuhuhuhuhuhuhuhuhuhu
URL #6	http:/huhuhuhuhuhuhuhuhuhuhu
URL #7	https:huhuhuhuhuhuhuhuhuhuhu
URL #8	http:/huhuhuhuhuhuhuhuhuhuhu
URL #9	http:/huhuhuhuhuhuhuhuhuhuhu
URL #10	http:/huhuhuhuhuhuhuhuhuhuhu
URL #11	http:/huhuhuhuhuhuhu
URL #12	http:/huhuhuhuhuhuhuhuhuhuhu
URL #13	http:/huhuhuhuhuhuhu
URL #14	http:/huhuhuhuhuhuhuhuhuhuhu
URL #15	http:/huhuhuhuhuhuhuhuhuhuhu
URL #16	http:/huhuhuhuhuhuhuhuhuhuhu
URL #17	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Embedded Resources UNKNWOWNsuspect

1huhuhuhu

Suspicious Type Names (1-2 chars) UNKNWOWN

0huhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

C:\Jobhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.