Malicious
f4c8429c8e8892465b1ee4979b572f93
ZIP Archive
MD5: f4c8429c8e8892465b1ee4979b572f93
Size: 4.35 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
4.35 KB · 4,353 B
First seen
2025-08-26 10:46 · one year ago
Last seen
2025-08-26 10:46 · one year ago
Last analysis
2025-08-26 10:46 · one year ago
Hashes
MD5
f4c8429c8e8892465b1ee4979b572f93
Sha1
8c871406d38c86cbb8078f027788fba5339e39d6
Sha256
f93b137b22761b7278b8d277e20b258341025408b81affa942b470ca01614bcc
Sha384
e095ffa3021e140dd7d56a7396411ee2fed8eaee11984ff8d339b74885ee3f6d66dda955e27fa0637b210c1167ad280b
Sha512
783a5ab1e0144a4e0be2e9598463f8c365fc810ea3753583cf167b67daf73428e45053271b2d4a16275b8306f55b4e9158bcb62d7fde07b0e6c7dcc5ca5f82e7
SSDeep
96:V9eVEW/mg1I9s7BT31tcsEGC+p51LzSpaRRdaymWIxfCr:V9eEW/mqIuFTFus/C2zaER3
TLSH
94917F2080097549F9BF84EB7B53E901D573CA31AFD90A163284E7BB0D055213CBD728
24 malicious · 24 files
ZIPf4c8429c8e8892465b1ee4979b572f93
VBSaudiomessage_expired.bat
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, [huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, "huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
!ps1! huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential24 malicious · 24 files
ZIPf4c8429c8e8892465b1ee4979b572f93
VBSaudiomessage_expired.bat
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, [huhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command] › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, "huhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command] › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
^
"[Ihuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command] › [Deobfuscated PS] › [Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
!ps1! huhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [PowerShell Command] › [Deobfuscated PS] › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [Deobfuscated PS] › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
bypasshuhuhuhuhuhuhuhuhuhuhu
f4c8429c8e8892465b1ee4979b572f93 › audiomessage_expired.bat › [Deobfuscated PS] › [Deobfuscated PS] › [Deobfuscated PS] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account