Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
3 malicious · 77 files
ZIP9ae1a976c76c3569c888229345ceb77d
OFF6fn50.3no33Ta49NT59.msi
BIN.
DLL__.dll
Structure
BINResources
EXEplantio.exe
| Config. Field | Value |
|---|---|
| URL #1 | http:/huhuhuhuhuhuhu |
| URL #2 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #3 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #4 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #5 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #6 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #7 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #8 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #9 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #10 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #11 | http:/huhuhuhuhuhuhu |
| URL #12 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #13 | http:/huhuhuhuhuhuhu |
| URL #14 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #15 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #16 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #17 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #18 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #19 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Config. Field | Value |
|---|---|
| URL #1 | http:/huhuhuhuhuhuhu |
| URL #2 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #3 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #4 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #5 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #6 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #7 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #8 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #9 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #10 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #11 | http:/huhuhuhuhuhuhu |
| URL #12 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #13 | http:/huhuhuhuhuhuhu |
| URL #14 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #15 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #16 | http:/huhuhuhuhuhuhuhuhuhuhu |
| URL #17 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential