Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
21 malicious · 21 files
ZIP92e5cd9f5e20550917ddede8e73b0f97T1059.001 · T1059.003 · T1204.002LOLBin
LNKPNG_0012.png.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
LNKPNG_0013.png.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
LNKPNG_0014.png.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
LNKSpysok.xls.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-w "Hhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
shortchuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-w "Hhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
shortchuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
shortchuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
shortchuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-w "Hhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-w "Hhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential