Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
23 malicious · 24 files
ZIPcfc6e8f2d788a2d0f7fbbf9ccf34019eLOLBin
LNKAkt_neprybutkuvannya_boyeprypasiv.docx.lnkLOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary].deobfuscated.vbs
LNKNakaz_neprybutkuvannya_boyeprypasiv.docx.lnkLOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
TXTREADME.txt
LNKSpysok_boyeprypasiv.docx.lnkLOLBin
SHLNK CommandLine
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS[Lnk Summary]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
LNK: Command Execution UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
& Remohuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙