Malicious ZIP Archive analysis – f4d4f80c995d

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

2 malicious · 1679 files

ZIPf4d4f80c995db4eadb3992739a09e0dfCVE-2019-9674

BINLib

PYabc.py

PYaifc.py

PYantigravity.py

PYargparse.py

PYast.py

PYbase64.py

PYbdb.py

PYbisect.py

PYbz2.py

PYcalendar.py

PYcgi.py

PYcgitb.py

PYchunk.py

PYcmd.py

PYcode.py

PYcodecs.py

PYcodeop.py

BINcollections

PYcolorsys.py

PYcompileall.py

PYconfigparser.py

PYcontextlib.py

PYcontextvars.py

PYcopy.py

PYcopyreg.py

PYcProfile.py

PYcrypt.py

PYcsv.py

BINctypes

PYdataclasses.py

PYdatetime.py

PYdecimal.py

PYdifflib.py

PYdis.py

PYdoctest.py

BINemail

BINencodings

PYenum.py

PYfilecmp.py

PYfileinput.py

PYfnmatch.py

PYfractions.py

PYftplib.py

PYfunctools.py

PYgenericpath.py

PYgetopt.py

PYgetpass.py

PYgettext.py

PYglob.py

PYgraphlib.py

PYgzip.py

PYhashlib.py

PYheapq.py

PYhmac.py

BINhttp

PYimaplib.py

PYimghdr.py

BINimportlib

PYinspect.py

PYio.py

PYipaddress.py

BINjson

PYkeyword.py

PYlinecache.py

PYlocale.py

BINlogging

PYlzma.py

PYmailbox.py

PYmailcap.py

PYmimetypes.py

PYmodulefinder.py

PYnetrc.py

PYnntplib.py

PYntpath.py

PYnturl2path.py

PYnumbers.py

PYopcode.py

PYoperator.py

PYoptparse.py

PYos.py

PYpathlib.py

PYpdb.py

PYpickle.py

PYpickletools.py

PYpipes.py

PYpkgutil.py

PYplatform.py

PYplistlib.py

PYpoplib.py

PYposixpath.py

PYpprint.py

PYprofile.py

PYprt.py

PYpstats.py

PYpty.py

PYpyclbr.py

PYpydoc.py

PYpy_compile.py

PYqueue.py

PYquopri.py

PYrandom.py

BINre

PYreprlib.py

PYrlcompleter.py

PYrunpy.py

PYsched.py

PYsecrets.py

PYselectors.py

PYshelve.py

PYshlex.py

PYshutil.py

PYsignal.py

BINsite-packages

PYsite.py

PYsmtplib.py

PYsndhdr.py

PYsocket.py

PYsocketserver.py

BINsqlite3

PYsre_compile.py

PYsre_constants.py

PYsre_parse.py

PYssl.py

PYstat.py

PYstatistics.py

PYstring.py

PYstringprep.py

PYstruct.py

PYsubprocess.py

PYsunau.py

PYsymtable.py

PYsysconfig.py

PYtabnanny.py

PYtarfile.py

PYtelnetlib.py

PYtempfile.py

PYtextwrap.py

PYthis.py

PYthreading.py

PYtimeit.py

PYtoken.py

PYtokenize.py

PYtrace.py

PYtraceback.py

PYtracemalloc.py

PYtty.py

PYturtle.py

PYtypes.py

PYtyping.py

BINurllib

PYuu.py

PYuuid.py

PYwarnings.py

PYwave.py

PYweakref.py

PYwebbrowser.py

PYxdrlib.py

PYzipapp.py

BINzipfile

PYzipimport.py

PY_aix_support.py

PY_collections_abc.py

PY_compat_pickle.py

PY_compression.py

PY_markupbase.py

PY_osx_support.py

PY_pydatetime.py

PY_pydecimal.py

PY_pyio.py

PY_pylong.py

PY_py_abc.py

PY_sitebuiltins.py

PY_strptime.py

PY_threading_local.py

PY_weakrefset.py

PY__future__.py

PY__hello__.py

BIN__pycache__

EXEpython.exe

DLLpython3.dll

DLLpython312.dll

DLLvcruntime140.dll

DLLvcruntime140_1.dll

BINDLLs

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #4 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #5 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #6 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #7 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #8 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #9 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #10 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #11 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #12 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #13 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #14 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #15 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential