Malicious
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
3 malicious · 16 files
ZIPdump-689829ecba59de6b87618aaa.zipRECORDSTEALER
EXEdump-689829ecba59de6b87618aaaRECORDSTEALER
Structure
EXE[Rebuild from dump]_6736ae72.exeRECORDSTEALER
Structure
BIN.Net Resources
BINResources
| Config. Field | Value |
|---|---|
| [Configuration Module Name] | Arghuhuhuhu |
| [Configuration Module Full Name] | Arghuhuhuhu |
| IP | LiwbUThuhuhuhuhuhuhuhuhuhuhu |
| ID | AhU+huhuhuhu |
| Message | |
| Key | chuhuhuhu |
| Version | 1huhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| [Configuration Module Name] | Arghuhuhuhu |
| [Configuration Module Full Name] | Arghuhuhuhu |
| IP (C2) | 176.46huhuhuhuhuhuhu |
| ID | jahuhuhuhu |
| Key | chuhuhuhu |
| Version | 1huhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialPE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential