Malicious ZIP Archive analysis – 6984625a7156

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

2 malicious · 960 files

ZIP6984625a7156be447b9ebd192f41a6c7

BINTurnaround

RHBreebgoo.rh

WSFClDrive16.exe

Structure

P7B[Authenticode]_f2214c47.p7b

BINResources

IMG0x00509086.svg

IMG0x005094C6.svg

IMG0x00509C36.svg

IMG0x0050A28E.svg

IMG0x0050A876.svg

IMG0x0050AE5E.svg

IMG0x0050B458.svg

IMG0x0050BA6E.svg

IMG0x0050C056.svg

IMG0x0050C63E.svg

IMG0x0050CB9E.svg

IMG0x0050CDF6.svg

IMG0x0050D5EE.svg

IMG0x0050D726.svg

IMG0x0050D946.svg

IMG0x0050E11E.svg

IMG0x0050E24E.svg

IMG0x0050E3BE.svg

IMG0x0050E7CE.svg

IMG0x0050EBDE.svg

IMG0x0050F416.svg

IMG0x0050F906.svg

IMG0x0050FD9E.svg

IMG0x0051058E.svg

IMG0x005109E6.svg

IMG0x00510DF6.svg

IMG0x00515826.svg

IMG0x0051D636.svg

IMG0x0051DB76.svg

IMG0x0051DE8E.svg

IMG0x0051F056.svg

IMG0x0051F9DE.svg

IMG0x00520E3E.svg

IMG0x0052C176.svg

IMG0x0052CA3E.svg

IMG0x0052CF1E.svg

IMG0x0052D43E.svg

IMG0x0052D6FE.svg

IMG0x0052DCF6.svg

IMG0x0052E0FC.svg

IMG0x0052E714.svg

IMG0x0052ED34.svg

IMG0x0052F3B6.svg

IMG0x0052F91E.svg

IMG0x0052FE86.svg

IMG0x005302EE.svg

IMG0x0053106E.svg

IMG0x0053195E.svg

IMG0x005320BE.svg

IMG0x00532666.svg

IMG0x00532FA6.svg

IMG0x00533746.svg

IMG0x00533F0E.svg

IMG0x005381F8.svg

IMG0x0057B4E9.svg

IMG0x00580B67.svg

IMG0x0058213D.svg

IMG0x00587215.svg

IMG0x00588EEF.svg

IMG0x0058DED5.svg

IMG0x0058E985.svg

IMG0x0058F2DD.svg

IMG0x00590365.svg

IMG0x00590C45.svg

IMG0x005918CD.svg

IMG0x00592B7D.svg

IMG0x00593065.svg

IMG0x0059463D.svg

IMG0x00682290.svg

IMG0x006B586F.svg

IMG0x00733153.svg

IMG0x0073555B.svg

IMG0x007358AB.svg

IMG0x00735DA3.svg

IMG0x0073625B.svg

IMG0x00736C23.svg

IMG0x007376E3.svg

IMG0x007384FB.svg

IMG0x0073920B.svg

IMG0x00739C0B.svg

IMG0x0073A663.svg

IMG0x0073AD35.svg

IMG0x0073B7D3.svg

IMG0x0073BEED.svg

IMG0x0073C6CB.svg

IMG0x0073CCCB.svg

IMG0x0073D2B3.svg

IMG0x0073E593.svg

IMG0x0073F873.svg

IMG0x0073FDDB.svg

IMG0x0074030B.svg

IMG0x0074084B.svg

IMG0x00743495.svg

IMG0x007438B5.svg

IMG0x00743C6B.svg

IMG0x00744BCB.svg

IMG0x007452C3.svg

IMG0x007459B3.svg

IMG0x007460B3.svg

IMG0x00746815.svg

IMG0x00746E55.svg

IMG0x007474D5.svg

IMG0x00747B65.svg

IMG0x00748235.svg

IMG0x00748745.svg

IMG0x00748C3D.svg

IMG0x007498AD.svg

IMG0x0074A5ED.svg

IMG0x0074A9BD.svg

IMG0x0074AD6D.svg

IMG0x0074B2B5.svg

IMG0x0074B78B.svg

IMG0x0074DEBB.svg

IMG0x0074E3C3.svg

IMG0x0074E87B.svg

IMG0x0074F253.svg

IMG0x0074FD13.svg

IMG0x00750A43.svg

IMG0x00752153.svg

IMG0x00752BAB.svg

IMG0x00753285.svg

IMG0x00753A1B.svg

IMG0x00754135.svg

IMG0x00754923.svg

IMG0x00754F4B.svg

IMG0x00755533.svg

IMG0x00756F73.svg

IMG0x00758993.svg

IMG0x00758F13.svg

IMG0x00759983.svg

IMG0x00759EC3.svg

IMG0x0075AE33.svg

IMG0x0075D7FB.svg

IMG0x00761593.svg

IMG0x00762E5B.svg

IMG0x00763D6B.svg

IMG0x00765F4B.svg

IMG0x0076812B.svg

IMG0x0076876B.svg

IMG0x007693D3.svg

IMG0x0076B423.svg

IMG0x0076CC9B.svg

IMG0x0076D723.svg

RLDeegbortkloud.rl

DLLlibcurl.dll

DLLMSVCP140.dll

DLLProtobufLite.dll

DLLsciter-x.dll

DLLVCRUNTIME140.dll

DLLvcruntime140_1.dll

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #16 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #17 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #18 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #19 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #20 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #21 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #22 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #23 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #24 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #25 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #26 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #27 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #28 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #29 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #30 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #31 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #32 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #33 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #34 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #35 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #36 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #37 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #38 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #39 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #40 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential