Malicious ZIP Archive analysis – d2e0db1f3722

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

2 malicious · 1635 files

ZIPd2e0db1f3722456c20fb8ece0211ae7aCVE-2019-9674

BINLib

PYabc.py

PYaifc.py

PYantigravity.py

PYargparse.py

PYast.py

PYbase64.py

PYbdb.py

PYbisect.py

PYbz2.py

PYcalendar.py

PYcgi.py

PYcgitb.py

PYchunk.py

PYcmd.py

PYcode.py

PYcodecs.py

PYcodeop.py

BINcollections

PYcolorsys.py

PYcompileall.py

PYconfigparser.py

PYcontextlib.py

PYcontextvars.py

PYcopy.py

PYcopyreg.py

PYcProfile.py

PYcrypt.py

PYcsv.py

BINctypes

PYdataclasses.py

PYdatetime.py

PYdecimal.py

PYdifflib.py

PYdis.py

PYdoctest.py

BINemail

BINencodings

PYenum.py

PYfilecmp.py

PYfileinput.py

PYfnmatch.py

PYfractions.py

PYftplib.py

PYfunctools.py

PYgenericpath.py

PYgetopt.py

PYgetpass.py

PYgettext.py

PYglob.py

PYgraphlib.py

PYgzip.py

PYhashlib.py

PYheapq.py

PYhmac.py

BINhttp

PYimaplib.py

PYimghdr.py

BINimportlib

PYinspect.py

PYio.py

PYipaddress.py

BINjson

PYkeyword.py

PYlinecache.py

PYlocale.py

BINlogging

PYlzma.py

PYmailbox.py

PYmailcap.py

PYmimetypes.py

PYmodulefinder.py

PYnetrc.py

PYnntplib.py

PYntpath.py

PYnturl2path.py

PYnumbers.py

PYopcode.py

PYoperator.py

PYoptparse.py

PYos.py

PYpathlib.py

PYpdb.py

PYpickle.py

PYpickletools.py

PYpipes.py

PYpkgutil.py

PYplatform.py

PYplistlib.py

PYpoplib.py

PYposixpath.py

PYpprint.py

PYprofile.py

PYprt.py

PYpstats.py

PYpty.py

PYpyclbr.py

PYpydoc.py

PYpy_compile.py

PYqueue.py

PYquopri.py

PYrandom.py

BINre

PYreprlib.py

PYrlcompleter.py

PYrunpy.py

PYsched.py

PYsecrets.py

PYselectors.py

PYshelve.py

PYshlex.py

PYshutil.py

PYsignal.py

BINsite-packages

PYsite.py

PYsmtplib.py

PYsndhdr.py

PYsocket.py

PYsocketserver.py

BINsqlite3

PYsre_compile.py

PYsre_constants.py

PYsre_parse.py

PYssl.py

PYstat.py

PYstatistics.py

PYstring.py

PYstringprep.py

PYstruct.py

PYsubprocess.py

PYsunau.py

PYsymtable.py

PYsysconfig.py

PYtabnanny.py

PYtarfile.py

PYtelnetlib.py

PYtempfile.py

PYtextwrap.py

PYthis.py

PYthreading.py

PYtimeit.py

PYtoken.py

PYtokenize.py

PYtrace.py

PYtraceback.py

PYtracemalloc.py

PYtty.py

PYturtle.py

PYtypes.py

PYtyping.py

BINurllib

PYuu.py

PYuuid.py

PYwarnings.py

PYwave.py

PYweakref.py

PYwebbrowser.py

PYxdrlib.py

PYzipapp.py

BINzipfile

PYzipimport.py

PY_aix_support.py

PY_collections_abc.py

PY_compat_pickle.py

PY_compression.py

PY_markupbase.py

PY_osx_support.py

PY_pydatetime.py

PY_pydecimal.py

PY_pyio.py

PY_pylong.py

PY_py_abc.py

PY_sitebuiltins.py

PY_strptime.py

PY_threading_local.py

PY_weakrefset.py

PY__future__.py

PY__hello__.py

BIN__pycache__

EXEpython.exe

DLLpython3.dll

DLLpython312.dll

DLLvcruntime140.dll

DLLvcruntime140_1.dll

BINDLLs

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

thuhuhuhu

PDB Path PATH

cryptohuhuhuhuhuhuhu

PDB Path PATH

D:\Githuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\phuhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

thuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\_huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\_huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

D:\a\1huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential