Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
2 malicious · 4 files
ZIP93456df9f634dc0bb41689ae3f91b4c0005eaddd062dc689e1c66db700188c74.zipDcRat
EXE93456df9f634dc0bb41689ae3f91b4c0005eaddd062dc689e1c66db700188c74.exeDcRat
Structure
BINResources
| Config. Field | Value |
|---|---|
| Key (AES_256) | UjhROUhuhuhuhuhuhuhuhuhuhuhu |
| Pastebin | -huhuhuhu |
| Certificate | MIICMDhuhuhuhuhuhuhuhuhuhuhu |
| ServerSignature | ERZWSGhuhuhuhuhuhuhuhuhuhuhu |
| Install | thuhuhuhu |
| BDOS | fhuhuhuhu |
| Anti-VM | fhuhuhuhu |
| Install File | PrimeBhuhuhuhuhuhuhu |
| Install-Folder | %Aphuhuhuhu |
| Hosts | luongshuhuhuhuhuhuhuhuhuhuhu |
| Ports | 80,443huhuhuhuhuhuhuhuhuhuhu |
| Mutex | PrimeBhuhuhuhuhuhuhuhuhuhuhu |
| Version | 1huhuhuhu |
| Delay | 1huhuhuhu |
| Group | Glhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialKey (AES_256)
MUTEXmalicious
UjhROUhuhuhuhuhuhuhuhuhuhuhu
CnC
CNCmalicious
luonhuhuhuhuhuhuhu
CnC
CNCmalicious
www.lhuhuhuhuhuhuhu
CnC
CNCmalicious
luonhuhuhuhuhuhuhu
CnC
CNCmalicious
www.luhuhuhuhuhuhuhu
CnC
CNCmalicious
www.luhuhuhuhuhuhuhu
CnC
CNCmalicious
luonhuhuhuhuhuhuhu
CnC
CNCmalicious
luonhuhuhuhuhuhuhu
CnC
CNCmalicious
www.lhuhuhuhuhuhuhu
CnC
CNCmalicious
apshuhuhuhu
CnC
CNCmalicious
www.huhuhuhuhuhuhu
CnC
CNCmalicious
www.luhuhuhuhuhuhuhu
CnC
CNCmalicious
luonhuhuhuhuhuhuhu
Ports
PORTmalicious
8huhuhuhu
Ports
PORTmalicious
4huhuhuhu
Ports
PORTmalicious
1huhuhuhu
Ports
PORTmalicious
5huhuhuhu
Ports
PORTmalicious
6huhuhuhu
Ports
PORTmalicious
8huhuhuhu
Ports
PORTmalicious
8huhuhuhu
Mutex
MUTEXmalicious
PrimeBhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential