Malicious
ZIP Archive
MD5: 7e20679049397c5e5616398715247e20
Size: 1.18 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
1.18 MB · 1,184,320 B
First seen
2025-07-25 20:00 · one year ago
Last seen
2025-07-25 20:00 · one year ago
Last analysis
2025-07-25 20:47 · one year ago
Hashes
MD5
7e20679049397c5e5616398715247e20
Sha1
0dbf9543f0da80a8ce0920a8e02b7b752116b11a
Sha256
15e0238c081f01fc65d591aa0592188c522e0987da6b9b6d42b5cbb6a4aa9050
Sha384
7cf180532d9a6dcd66b67124703e7c370d6dc30e9dfe7ed219df6ae9f2df570b4dceebbdf924e05e532523c8114fb0dd
Sha512
f9d85466458e09e01c798f08913edadce68fd95456017aa81f04b2e275e05882764f33368a75e5c23c3548831cd6d793d6aa5f9efc7347838912d4565c65e3cd
SSDeep
24576:yZG3G4SunSKioQZv+FWNn0DZ4r7gBaoD+Va1nd7PaZXX3ou3u+PG:7SunSKbQZGrD2IP1dulnoue++
TLSH
4D4533F5EE011748C2A52860237CBBF4186A860F7649472FC1E55562D31F321DEAFA7E
2 malicious · 69 files
ZIP7e20679049397c5e5616398715247e20AgentTesla
BINCheatWave
DLLGuna.UI2.dllAgentTesla
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINGuna.UI2.AnimatorNS.DoubleBitmapForm.resources
BING22190F0D5B1120504B3E00280003060D0F0F4F38724F222206070B01020F0F27012B0C.resources
BINicon.Image
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINGuna.UI2.Properties.Resources.resources
BINCheckedCheckbox_20px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINCheckedRadioButton_20px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINFullImage_64px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINImageCalendar
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINUncheckedCheckbox_20px
BINUncheckedRadioButton_20px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINce_48px
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINcurv3
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINcurv3_w
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINerror
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINinfo
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINlogo
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINlogo_w
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINmiring
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINquestion
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BINwarning
IMG[NBF]root.Data
IMG[NBF]root.Data-preview.png
BING22190F0D5B1120504B250025230207091246250F300029390C06331B0E163B151735041C232100000E0B.resources
BINbtDown.Image
BINbtUp.Image
BINimageList1.ImageStream
DATA[NBF]root.Data
EXELoader.exe
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
BIN.Net Resources
BINChwatWave.CheatWave.resources
ICON$this.Icon
BIN[NBF]root.IconData
BININJECTOR_PUBLIC.Properties.Resources.resources
EXEWave
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
PDB Path
PATH
C:\Usehuhuhuhuhuhuhuhuhuhuhu
PDB Path
PATH
?huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 69 files
ZIP7e20679049397c5e5616398715247e20AgentTesla
BINCheatWave
DLLGuna.UI2.dllAgentTesla
Structure
BINResources
BIN.Net Resources
EXELoader.exe
No malware configuration was found at this point.
PDB Path
PATH
C:\Usehuhuhuhuhuhuhuhuhuhuhu
7e20679049397c5e5616398715247e20 › CheatWave › Loader.exe
PDB Path
PATH
?huhuhuhu
7e20679049397c5e5616398715247e20 › CheatWave › Loader.exe › .Net Resources › INJECTOR_PUBLIC.Properties.Resources.resources › Wave
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account