Malicious
Tar Archive
MD5:
Size: 0 B
application/x-tar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Tar archive
3 malicious · 678 files
TARa845bf809a781fc6c5161b842be0321fT1218 · T1218.005
PDFPDF @0x00000600
BIN附件
BINd41d8cd98f00b204e9800998ecf8427e
BIN線上申請
BIN申報流程
BIN案件回傳資料異常原因
LNK案件回傳資料異常原因.pdf.lnkT1218 · T1218.005
BIN[Lnk Summary]
PDF財政部稅務入口網.pdf
| Config. Field | Value |
|---|---|
| URL #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Name | Value |
|---|---|
| 線上申請.pdf | 1.4 |
| 線上申請.pdf | D:20251116020004+00'00' |
| 線上申請.pdf | |
| 線上申請.pdf | D:20251116020004+00'00' |
| 線上申請.pdf | 线上申请-財政部稅務入口網 |
| 線上申請.pdf | Skia/PDF m142 |
| 線上申請.pdf | |
| 線上申請.pdf | Skia/PDF m142 |
| 線上申請.pdf | D:20251116020004+00'00' |
| 線上申請.pdf | D:20251116020004+00'00' |
| 線上驗證.pdf | 1.4 |
| 線上驗證.pdf | D:20251116020307+00'00' |
| 線上驗證.pdf | |
| 線上驗證.pdf | D:20251116020307+00'00' |
| 線上驗證.pdf | 線上驗證-檔案驗證-財政部稅務入口網 |
| 線上驗證.pdf | Skia/PDF m142 |
| 線上驗證.pdf | |
| 線上驗證.pdf | Skia/PDF m142 |
| 線上驗證.pdf | D:20251116020307+00'00' |
| 線上驗證.pdf | D:20251116020307+00'00' |
| 進度查詢及文件下載.pdf | 1.4 |
| 進度查詢及文件下載.pdf | D:20251116020225+00'00' |
| 進度查詢及文件下載.pdf | |
| 進度查詢及文件下載.pdf | D:20251116020225+00'00' |
| 進度查詢及文件下載.pdf | 進度查詢及文件下載-財政部稅務入口網 |
| 進度查詢及文件下載.pdf | Skia/PDF m142 |
| 進度查詢及文件下載.pdf | |
| 進度查詢及文件下載.pdf | Skia/PDF m142 |
| 進度查詢及文件下載.pdf | D:20251116020225+00'00' |
| 進度查詢及文件下載.pdf | D:20251116020225+00'00' |
| 申報註銷申請書.pdf | 1.6 |
| 申報註銷申請書.pdf | D:20250915080545+08'00' |
| 申報註銷申請書.pdf | Writer |
| 申報註銷申請書.pdf | MODA ODF Application Tools 3.5.5 |
| 申報註銷申請書.pdf | D:20250915080545+08'00' |
| 財政部稅務入口網.pdf | 1.4 |
| 財政部稅務入口網.pdf | D:20251116015736+00'00' |
| 財政部稅務入口網.pdf | |
| 財政部稅務入口網.pdf | D:20251116015736+00'00' |
| 財政部稅務入口網.pdf | 113年度第2批-財政部稅務入口網 |
| 財政部稅務入口網.pdf | Skia/PDF m142 |
| 財政部稅務入口網.pdf | |
| 財政部稅務入口網.pdf | Skia/PDF m142 |
| 財政部稅務入口網.pdf | D:20251116015736+00'00' |
| 財政部稅務入口網.pdf | D:20251116015736+00'00' |
URI
URI
http:/huhuhuhuhuhuhu
URI
URI
http:/huhuhuhuhuhuhu
URI
URI
http:/huhuhuhuhuhuhu
URI
URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI
URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
LNK: Script Execution
UNKNWOWNmalicious
mshta.huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
URI
URI
hxxp:/huhuhuhuhuhuhuhuhuhuhu
URI
URI
http:/huhuhuhuhuhuhuhuhuhuhu
URI
URI
hxxp:/huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
URI
URI
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential