Malicious ZIP Archive analysis – 7bb2021c2a7f

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

3 malicious · 1037 files

ZIP7bb2021c2a7fb42c49c55181ebc1f7bb

EXE1.07.01-Setup-SintysAI.exe

BINDLLs

BINinclude

BINLib

PYabc.py

PYantigravity.py

PYargparse.py

PYast.py

PYbase64.py

PYbdb.py

PYbisect.py

PYbz2.py

PYcalendar.py

PYcmd.py

PYcode.py

PYcodecs.py

PYcodeop.py

BINcollections

PYcolorsys.py

PYcompileall.py

PYconfigparser.py

PYcontextlib.py

PYcontextvars.py

PYcopy.py

PYcopyreg.py

PYcProfile.py

PYcsv.py

BINctypes

PYdataclasses.py

PYdatetime.py

PYdecimal.py

PYdifflib.py

PYdis.py

PYdoctest.py

BINencodings

PS1aliases.py

PS1[Deobfuscated PS]

PYascii.py

PYbase64_codec.py

PYbig5.py

PYbig5hkscs.py

PYbz2_codec.py

PYcharmap.py

PYcp037.py

PYcp1006.py

PYcp1026.py

PYcp1125.py

PYcp1140.py

PYcp1250.py

PYcp1251.py

PYcp1252.py

PYcp1253.py

PYcp1254.py

PYcp1255.py

PYcp1256.py

PYcp1257.py

PYcp1258.py

PYcp273.py

PYcp424.py

PYcp437.py

PYcp500.py

PYcp720.py

PYcp737.py

PYcp775.py

PYcp850.py

PYcp852.py

PYcp855.py

PYcp856.py

PYcp857.py

PYcp858.py

PYcp860.py

PYcp861.py

PYcp862.py

PYcp863.py

PYcp864.py

PYcp865.py

PYcp866.py

PYcp869.py

PYcp874.py

PYcp875.py

PYcp932.py

PYcp949.py

PYcp950.py

PYeuc_jisx0213.py

PYeuc_jis_2004.py

PYeuc_jp.py

PYeuc_kr.py

PYgb18030.py

PYgb2312.py

PYgbk.py

PYhex_codec.py

PYhp_roman8.py

PYhz.py

PYidna.py

PYiso2022_jp.py

PYiso2022_jp_1.py

PYiso2022_jp_2.py

PYiso2022_jp_2004.py

PYiso2022_jp_3.py

PYiso2022_jp_ext.py

PYiso2022_kr.py

PYiso8859_1.py

PYiso8859_10.py

PYiso8859_11.py

PYiso8859_13.py

PYiso8859_14.py

PYiso8859_15.py

PYiso8859_16.py

PYiso8859_2.py

PYiso8859_3.py

PYiso8859_4.py

PYiso8859_5.py

PYiso8859_6.py

PYiso8859_7.py

PYiso8859_8.py

PYiso8859_9.py

PYjohab.py

PYkoi8_r.py

PYkoi8_t.py

PYkoi8_u.py

PYkz1048.py

PYlatin_1.py

PYmac_arabic.py

PYmac_croatian.py

PYmac_cyrillic.py

PYmac_farsi.py

PYmac_greek.py

PYmac_iceland.py

PYmac_latin2.py

PYmac_roman.py

PYmac_romanian.py

PYmac_turkish.py

PYmbcs.py

PYoem.py

PYpalmos.py

PYptcp154.py

PYpunycode.py

PYquopri_codec.py

PYraw_unicode_escape.py

PYrot_13.py

PYshift_jis.py

PYshift_jisx0213.py

PYshift_jis_2004.py

PYtis_620.py

PYundefined.py

PYunicode_escape.py

PYutf_16.py

PYutf_16_be.py

PYutf_16_le.py

PYutf_32.py

PYutf_32_be.py

PYutf_32_le.py

PYutf_7.py

PYutf_8.py

PYutf_8_sig.py

PYuu_codec.py

PYzlib_codec.py

PY__init__.py

BIN__pycache__

PYenum.py

PYfilecmp.py

PYfileinput.py

PYfnmatch.py

PYfractions.py

PYftplib.py

PYfunctools.py

PYgenericpath.py

PYgetopt.py

PYgetpass.py

PYgettext.py

PYglob.py

PYgraphlib.py

PYgzip.py

PYhashlib.py

PYheapq.py

PYhmac.py

PYimaplib.py

PYinspect.py

PYio.py

PYipaddress.py

PYkeyword.py

PYlinecache.py

PYlocale.py

PYlzma.py

PYmailbox.py

PYmimetypes.py

PYmodulefinder.py

PYnetrc.py

PYntpath.py

PYnturl2path.py

PYnumbers.py

PYopcode.py

PYoperator.py

PYoptparse.py

PYos.py

PYpdb.py

PYpickle.py

PYpickletools.py

PYpkgutil.py

PYplatform.py

PYplistlib.py

PYpoplib.py

PYposixpath.py

PYpprint.py

PYprofile.py

PYpstats.py

PYpty.py

PYpyclbr.py

PYpydoc.py

PYpy_compile.py

PYqueue.py

PYquopri.py

PYrandom.py

PYreprlib.py

PYrlcompleter.py

PYrunpy.py

PYsched.py

PYsecrets.py

PYselectors.py

PYshelve.py

PYshlex.py

PYshutil.py

PYsignal.py

PYsite.py

PYsmtplib.py

PYsocket.py

PYsocketserver.py

PYsre_compile.py

PYsre_constants.py

PYsre_parse.py

PYssl.py

PYstat.py

PYstatistics.py

PYstring.py

PYstringprep.py

PYstruct.py

PYsubprocess.py

PYsymtable.py

PYtabnanny.py

PYtarfile.py

PYtempfile.py

PYtextwrap.py

PYthis.py

PYthreading.py

PYtimeit.py

PYtoken.py

PYtokenize.py

PYtrace.py

PYtraceback.py

PYtracemalloc.py

PYtty.py

PYturtle.py

PYtypes.py

PYtyping.py

BINurllib

PYuuid.py

PYwarnings.py

PYwave.py

PYweakref.py

PYwebbrowser.py

PYzipapp.py

PYzipimport.py

PY_aix_support.py

PY_android_support.py

PY_apple_support.py

PY_collections_abc.py

PY_colorize.py

PY_compat_pickle.py

PY_compression.py

PY_ios_support.py

PY_markupbase.py

PY_opcode_metadata.py

PY_osx_support.py

PY_pydatetime.py

PY_pydecimal.py

PY_pyio.py

PY_pylong.py

PY_py_abc.py

PY_sitebuiltins.py

PY_strptime.py

PY_threading_local.py

PY_weakrefset.py

PY__future__.py

PY__hello__.py

BIN__pycache__

DLLpython313.dll

DLLpython3_.dll

BINScripts

DLLvcruntime140.dll

DLLvcruntime140_1.dll

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential