Malicious ZIP Archive analysis – c5b6f2f82498

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

2 malicious · 1635 files

ZIPc5b6f2f82498cdecbb03a2da2f8c9d9aCVE-2019-9674

BINDLLs

BINLib

PYabc.py

PYaifc.py

PYantigravity.py

PYargparse.py

PYast.py

PYbase64.py

PYbdb.py

PYbisect.py

PYbz2.py

PYcalendar.py

PYcgi.py

PYcgitb.py

PYchunk.py

PYcmd.py

PYcode.py

PYcodecs.py

PYcodeop.py

BINcollections

PYcolorsys.py

PYcompileall.py

PYconfigparser.py

PYcontextlib.py

PYcontextvars.py

PYcopy.py

PYcopyreg.py

PYcProfile.py

PYcrypt.py

PYcsv.py

BINctypes

PYdataclasses.py

PYdatetime.py

PYdecimal.py

PYdifflib.py

PYdis.py

PYdoctest.py

BINemail

BINencodings

PYenum.py

PYfilecmp.py

PYfileinput.py

PYfnmatch.py

PYfractions.py

PYftplib.py

PYfunctools.py

PYgenericpath.py

PYgetopt.py

PYgetpass.py

PYgettext.py

PYglob.py

PYgraphlib.py

PYgzip.py

PYhashlib.py

PYheapq.py

PYhmac.py

BINhttp

PYimaplib.py

PYimghdr.py

BINimportlib

PYinspect.py

PYio.py

PYipaddress.py

BINjson

PYkeyword.py

PYlinecache.py

PYlocale.py

BINlogging

PYlzma.py

PYmailbox.py

PYmailcap.py

PYmimetypes.py

PYmodulefinder.py

PYnetrc.py

PYnntplib.py

PYntpath.py

PYnturl2path.py

PYnumbers.py

PYopcode.py

PYoperator.py

PYoptparse.py

PYos.py

PYpathlib.py

PYpdb.py

PYpickle.py

PYpickletools.py

PYpipes.py

PYpkgutil.py

PYplatform.py

PYplistlib.py

PYpoplib.py

PYposixpath.py

PYpprint.py

PYprofile.py

PYprt.py

PYpstats.py

PYpty.py

PYpyclbr.py

PYpydoc.py

PYpy_compile.py

PYqueue.py

PYquopri.py

PYrandom.py

BINre

PYreprlib.py

PYrlcompleter.py

PYrunpy.py

PYsched.py

PYsecrets.py

PYselectors.py

PYshelve.py

PYshlex.py

PYshutil.py

PYsignal.py

BINsite-packages

PYsite.py

PYsmtplib.py

PYsndhdr.py

PYsocket.py

PYsocketserver.py

BINsqlite3

PYsre_compile.py

PYsre_constants.py

PYsre_parse.py

PYssl.py

PYstat.py

PYstatistics.py

PYstring.py

PYstringprep.py

PYstruct.py

PYsubprocess.py

PYsunau.py

PYsymtable.py

PYsysconfig.py

PYtabnanny.py

PYtarfile.py

PYtelnetlib.py

PYtempfile.py

PYtextwrap.py

PYthis.py

PYthreading.py

PYtimeit.py

PYtoken.py

PYtokenize.py

PYtrace.py

PYtraceback.py

PYtracemalloc.py

PYtty.py

PYturtle.py

PYtypes.py

PYtyping.py

BINurllib

PYuu.py

PYuuid.py

PYwarnings.py

PYwave.py

PYweakref.py

PYwebbrowser.py

PYxdrlib.py

PYzipapp.py

BINzipfile

PYzipimport.py

PY_aix_support.py

PY_collections_abc.py

PY_compat_pickle.py

PY_compression.py

PY_markupbase.py

PY_osx_support.py

PY_pydatetime.py

PY_pydecimal.py

PY_pyio.py

PY_pylong.py

PY_py_abc.py

PY_sitebuiltins.py

PY_strptime.py

PY_threading_local.py

PY_weakrefset.py

PY__future__.py

PY__hello__.py

BIN__pycache__

EXEpython.exe

DLLpython3.dll

DLLpython312.dll

DLLvcruntime140.dll

DLLvcruntime140_1.dll

PDB Path PATH

D:\a\_huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\_huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

thuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhu

PDB Path PATH

thuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

cryptohuhuhuhuhuhuhu

PDB Path PATH

D:\Githuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential