Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
7 malicious · 12 files
ZIPbec053796102aace66437c22db744908T1059.001 · T1059.003 · T1204.002LOLBin
BINMerger_and_Acquisition_Details
PNG6B63651-B1D6-417E-B687-FCDD3CBDB84.png
LNKMerger_and_Acquisition_Details.txt.lnkT1059.001 · T1059.003 · T1204.002LOLBin
SHLNK CommandLine
PS1[Deobfuscated PS]
PS1[Lnk Summary]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PDFNSI82_12.pdf
| Name | Value |
|---|---|
| NSI82_12.pdf | 1.7 |
| NSI82_12.pdf | Wins Upgrade |
| NSI82_12.pdf | D:20251204082245-05'00' |
| NSI82_12.pdf | WPS Writer |
| NSI82_12.pdf | — |
| NSI82_12.pdf | D:20251204082302-05'00' |
| NSI82_12.pdf | — |
| NSI82_12.pdf | — |
| NSI82_12.pdf | — |
| NSI82_12.pdf | Wins Upgrade |
| NSI82_12.pdf | — |
| NSI82_12.pdf | — |
| NSI82_12.pdf | D:20251204082245-05'00' |
| NSI82_12.pdf | WPS Writer |
| NSI82_12.pdf | — |
| NSI82_12.pdf | D:20251204082302-05'00' |
| NSI82_12.pdf | — |
| NSI82_12.pdf | D:20251204082245-05'00' |
| NSI82_12.pdf | — |
| NSI82_12.pdf | — |
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
-windohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential