Malicious
7754077ee9191839a971e99d38e9dc1a
ZIP Archive
MD5: 7754077ee9191839a971e99d38e9dc1a
Size: 85.07 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
85.07 KB · 85,074 B
Hashes
MD5
7754077ee9191839a971e99d38e9dc1a
Sha1
2eb2d5c3aa11524e031ae6dd6f1715b5c877cbd5
Sha256
7ccbda568ff313b5e75d20b3bad6b9191a5f5b53eb867d05150c732f5cb039c2
Sha384
a202e77dd2b128fe60a0afb3fc829c4a1ecc4158e2e7c74877b789fc80bb6b7b6a57754858d5d09dd77636a91c78f45f
Sha512
4798c3b2d4f5727f0f8fc63486ea9ceddb641eae85ecf25c3e273cbce6be724c85078e61d7f57887cbe11904e841dffe01ee2c00eb870ea207ddfe55ce7314be
SSDeep
24:foGX/ALDR5yW2RiqTeKT6CwD8Bx51WEn9+JkMRgRrT7UL3LXU5oG6V:f5vIRUVQqTelCUk51WU+KHhkLI56V
TLSH
F683AC9476E80304F1B5FE36CE7677864436BA80EE318B6C0AA4CC6C6951A01DC71F33
9 malicious · 9 files
ZIP7754077ee9191839a971e99d38e9dc1aT1059.001 · T1059.003 · T1059.005LOLBin
LNKإعداد_القادة.pdf.lnkT1059.001 · T1059.003 · T1059.005LOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary]T1059.005
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary].deobfuscated.vbsT1059.005
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential9 malicious · 9 files
ZIP7754077ee9191839a971e99d38e9dc1aT1059.001 · T1059.003 · T1059.005LOLBin
LNKإعداد_القادة.pdf.lnkT1059.001 · T1059.003 · T1059.005LOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary]T1059.005
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary].deobfuscated.vbsT1059.005
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
7754077ee9191839a971e99d38e9dc1a › إعداد_القادة.pdf.lnk
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
7754077ee9191839a971e99d38e9dc1a › إعداد_القادة.pdf.lnk › [Lnk Summary]
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
7754077ee9191839a971e99d38e9dc1a › إعداد_القادة.pdf.lnk › [Lnk Summary] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
7754077ee9191839a971e99d38e9dc1a › إعداد_القادة.pdf.lnk › LNK CommandLine › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account