Malicious
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
3 malicious · 70 files
ZIPe9d208ba4ed3f964892964c1357d0e64T1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
LNKDatenschutz_Update_2025_2.pdf.lnkT1059.003 · T1204.002 · T1202: Indirect Command ExecutionLOLBin
BIN[Lnk Summary]
PDFDatenschutz_Erklaerung.pdf
EXEcounter32.node
DATCACHE.DAT
BATIconCache.bat
BAKCACHE.DAT.BAK
| Config. Field | Value |
|---|---|
| URL #1 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #2 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #3 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #4 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #5 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #6 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #7 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #8 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #9 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #10 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #11 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #12 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #13 | https:huhuhuhuhuhuhu |
| URL #14 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #15 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #16 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #17 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #18 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #19 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #20 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #21 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #22 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #23 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #24 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #25 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #26 | https:huhuhuhuhuhuhu |
| URL #27 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #28 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #29 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #30 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #31 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #32 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #33 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #34 | https:huhuhuhuhuhuhuhuhuhuhu |
| URL #35 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential| Name | Value |
|---|---|
| Datenschutz_Erklaerung.pdf | 1.5 |
| Datenschutz_Erklaerung.pdf | ehernandez |
| Datenschutz_Erklaerung.pdf | D:20251021113953+02'00' |
| Datenschutz_Erklaerung.pdf | DATAC Archivprinter V2 (12.2.0.2905) |
| Datenschutz_Erklaerung.pdf | D:20251021113953+02'00' |
| Datenschutz_Erklaerung.pdf | Microsoft Word - Dokument1 |
| Datenschutz_Erklaerung.pdf | DATAC Archivprinter V2 / http://www.datac.de / FPG |
| Datenschutz_Erklaerung.pdf | DATAC Archivprinter V2 / http://www.datac.de / FPG |
| Datenschutz_Erklaerung.pdf | D:20251021113953+02'00' |
| Datenschutz_Erklaerung.pdf | D:20251021113953+02'00' |
| Datenschutz_Erklaerung.pdf | DATAC Archivprinter V2 (12.2.0.2905) |
| Datenschutz_Erklaerung.pdf | Microsoft Word - Dokument1 |
| Datenschutz_Erklaerung.pdf | ehernandez |
LNK: Command Execution
UNKNWOWNmalicious
conhoshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential