Suspect
The file 7f80ed4fb621e063ae052b3301acc938 is a file for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Inconclusive
- File type
- file
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
10 files
BIN7f80ed4fb621e063ae052b3301acc938
PDFPDF @0x005B9800
| Name | Value |
|---|---|
| PDF @0x005B9800 | 1.3 |
| PDF @0x005B9800 | brusso |
| PDF @0x005B9800 | D:20210608161801-03'00' |
| PDF @0x005B9800 | clawPDF 0.8.4.0 |
| PDF @0x005B9800 | — |
| PDF @0x005B9800 | D:20210608161801-03'00' |
| PDF @0x005B9800 | — |
| PDF @0x005B9800 | Recibo |
| PDF @0x005B9800 | clawPDF 0.8.4.0 |
| PDF @0x005B9800 | clawPDF 0.8.4.0 |
| PDF @0x005B9800 | D:20210608161801-03'00' |
| PDF @0x005B9800 | D:20210608161801-03'00' |
| PDF @0x005B9800 | Recibo |
| PDF @0x005B9800 | brusso |
| PDF @0x005B9800 | — |
| PDF @0x005B9800 | — |
| PDF @0x005B9800 | clawPDF 0.8.4.0 |
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #16
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #24
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #28
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #31
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential