Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bd260bf220b310ebdd9ab0b50114f627
Sha1 599ce20ddf1a2c7aecfd7431702ca1ead3e50f4e
Sha256 a9600cfc69d4960d2c7be6fe24203f30a3d945ba638b402efe843e56e7a8805c
Sha384 8c63597f914c0d623fff12c7fde87a7a6fb6a243f386eb29d6ca7d33fd717e3b7bcf75ed727a8b9ab35feab6e7cb1a6b
Sha512 175d88c08fc8ea6d45daedab1e735ee2f6b2a6c6ca52972e9283eb4f2a288cae6688fd5cc939efe72022de2eb06408ab04e9699bed3da9930b33e7658a34cd09
SSDeep 98304:nIUWpHKb/s2UleTndXeDrSm/8F8vk+AIkMkk3unBA0pp2Wk+QF0F7LJPeXFwgI0k:IdpHKzs2zA8ulAfQ0BAL87l9SFITGwJ
TLSH D3A612EC286034DE8DD30ECD7A9E42C9161A78505AAB35DE3B5C4771B7AAF5B097083C
bd260bf220b310ebdd9ab0b50114f627
Malicious
PPT for Breifing at HQ Norther Command
Malicious
excel
Malicious
excel
Malicious
.Net Resources
jrnswry_acrhyis.Form1.resources
toolStripButton1.Image
[NBF]root.Data
[NBF]root.Data-preview.png
jrnswry_acrhyis.Properties.Resources.resources
excel.bat
excelm
[Content_Types].xml
_rels
.rels
ppt
slides
_rels
slide8.xml.rels
slide7.xml.rels
slide5.xml.rels
slide6.xml.rels
slide4.xml.rels
slide3.xml.rels
slide2.xml.rels
slide1.xml.rels
slide9.xml.rels
slide18.xml.rels
slide17.xml.rels
slide16.xml.rels
slide15.xml.rels
slide14.xml.rels
slide12.xml.rels
slide11.xml.rels
slide10.xml.rels
slide1.xml
slide2.xml
slide3.xml
slide4.xml
slide5.xml
slide6.xml
slide7.xml
slide8.xml
slide9.xml
slide10.xml
slide11.xml
slide12.xml
slide13.xml
slide14.xml
slide15.xml
slide16.xml
slide17.xml
slide18.xml
presentation.xml
_rels
presentation.xml.rels
slideMasters
slideMaster1.xml
slideMaster2.xml
_rels
slideMaster1.xml.rels
slideMaster2.xml.rels
slideLayouts
_rels
slideLayout4.xml.rels
slideLayout12.xml.rels
slideLayout13.xml.rels
slideLayout14.xml.rels
slideLayout16.xml.rels
slideLayout17.xml.rels
slideLayout18.xml.rels
slideLayout19.xml.rels
slideLayout20.xml.rels
slideLayout21.xml.rels
slideLayout22.xml.rels
slideLayout23.xml.rels
slideLayout1.xml
slideLayout2.xml
slideLayout3.xml
slideLayout4.xml
slideLayout5.xml
slideLayout6.xml
slideLayout7.xml
slideLayout8.xml
slideLayout9.xml
slideLayout10.xml
slideLayout11.xml
slideLayout12.xml
slideLayout13.xml
slideLayout14.xml
slideLayout15.xml
slideLayout16.xml
slideLayout17.xml
slideLayout19.xml
slideLayout20.xml
slideLayout21.xml
slideLayout22.xml
slideLayout23.xml
slideLayout24.xml
slideLayout25.xml
slideLayout18.xml
notesSlides
_rels
notesSlide1.xml.rels
notesSlide2.xml.rels
notesSlide3.xml.rels
notesSlide1.xml
notesSlide2.xml
notesSlide3.xml
notesMasters
notesMaster1.xml
_rels
notesMaster1.xml.rels
media
image26.png
image26.png-preview.png
image27.png
image27.png-preview.png
image28.png
image28.png-preview.png
image29.jpeg
image29.jpeg-preview.png
image30.emf
image8.png
image8.png-preview.png
image1.emf
image2.png
image2.png-preview.png
image3.png
image3.png-preview.png
image4.png
image4.png-preview.png
image5.png
image5.png-preview.png
image6.png
image6.png-preview.png
hdphoto1.wdp
image7.png
image7.png-preview.png
hdphoto2.wdp
image9.png
image9.png-preview.png
image10.png
image10.png-preview.png
hdphoto3.wdp
image31.png
image31.png-preview.png
image36.jpeg
image36.jpeg-preview.png
image32.png
image32.png-preview.png
image33.png
image33.png-preview.png
image18.png
image18.png-preview.png
image22.emf
image34.jpeg
image34.jpeg-preview.png
image20.emf
image35.jpg
image35.jpg.exif
image35.jpg-preview.png
image19.png
image19.png-preview.png
hdphoto7.wdp
image11.png
image11.png-preview.png
image17.png
image17.png-preview.png
hdphoto6.wdp
image16.png
image16.png-preview.png
image15.png
image15.png-preview.png
hdphoto5.wdp
image14.png
image14.png-preview.png
image13.png
image13.png-preview.png
hdphoto4.wdp
image12.png
image12.png-preview.png
image23.png
image23.png-preview.png
image24.emf
image21.emf
image25.png
image25.png-preview.png
theme
theme1.xml
theme2.xml
theme4.xml
handoutMasters
handoutMaster1.xml
_rels
handoutMaster1.xml.rels
embeddings
oleObject8.bin
Root Entry
think-cellXML
oleObject1.bin
Root Entry
think-cellXML
think-cellChild0
oleObject5.bin
Root Entry
think-cellXML
oleObject4.bin
oleObject6.bin
Root Entry
think-cellXML
oleObject3.bin
Root Entry
think-cellXML
oleObject2.bin
Root Entry
think-cellXML
oleObject7.bin
Root Entry
think-cellXML
presProps.xml
viewProps.xml
tableStyles.xml
tags
tag1.xml
tag2.xml
tag3.xml
tag4.xml
tag17.xml
docProps
thumbnail.jpeg
thumbnail.jpeg-preview.png
core.xml
app.xml
docMetadata
LabelInfo.xml
office.bat
PPT for Breifing at HQ Norther Command.pptx.lnk
Malicious
[Lnk Summary]
Malicious
PPT for Breifing at HQ Norther Command.pptx.lnk
Malicious
[Lnk Summary]
Malicious
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙