Malicious
ZIP Archive
MD5:
Size: 0 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
5 malicious · 240 files
ZIPc4120c50690a44fb51972992e011ee01T1059.005
BINGodrej_One_Mahalaxmi_Site_Salary_JUNE-2025
TXTerror_2025070260352966701.txt
CSVEXECLFORMATFORDIRECTSALARY_ONE MAHALAXMI1.CSV
XLSGodrej_One_Mahalaxmi_Site_Salary_JUNE-2025.xlsx
XLSHead_Count_-_June-25.xlsx
XLSPF.xlsx
PDFUAN.pdf
OFFUAN_GENERATION.xlsT1059.005
OFF[Repaired @0x0000CD39]
BIN.
BINRoot Entry
BINCompObj
OFFWorkbook
OFF[Repaired @0x0000C739]
XML[Content_Types].xml
BIN_rels
BINdrs
BIN_VBA_PROJECT_CUR
BINSummaryInformation
BINDocumentSummaryInformation
| Config. Field | Value |
|---|---|
| URL #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Name | Value |
|---|---|
| UAN.pdf | 1.4 |
| UAN.pdf | D:20250703130330+05'30' |
| UAN.pdf | JasperReports Library version 6.20.5-3efcf2e67f959db3888d79f73dde2dbd7acb4f8e |
| UAN.pdf | D:20250703130330+05'30' |
| UAN.pdf | OpenPDF 1.3.30; modified using iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version) |
| UAN.pdf | D:20250703130330+05'30' |
| UAN.pdf | JasperReports Library version 6.20.5-3efcf2e67f959db3888d79f73dde2dbd7acb4f8e |
| UAN.pdf | D:20250703130330+05'30' |
| UAN.pdf | OpenPDF 1.3.30; modified using iText® 5.5.13.3 ©2000-2022 iText Group NV (AGPL-version) |