Search tag:T1112 | Malva.RE

Microsoft Office document

a3bb2c8db10dba1b77e733f6c123f837

MD5 a3bb2c8db10dba1b77e733f6c123f837 · SHA256 27e1594334eabcf7d927fb444dabc1f4221a36a8fa[...]87b

CAB:COMPRESSION:MSZIP PE File Layout PDB Path SOS: 0.22 Managed .NET SOS: 0.16 SOS: 0.41 WScript.Shell DeObfuscated VBScript

10.66 MB 18 days ago

Malicious

7Zip SFX archive

94e791c4f0e69665c326c0ec634aa0b6

MD5 94e791c4f0e69665c326c0ec634aa0b6 · SHA256 a3fcd1222767342c0d8962b8828fca4e65424ad76c[...]21c

PE File Layout Win 32 Exe x86 Archive 7z non extractible (chiffrée, corrompue ou vide)Blacklist VBA SOS: 0.38 scripting.filesystemobject WScript.Shell WinHttp.WinHttpRequest.5.1 WinHttp.WinHttpRequest.5

6.55 MB 21 days ago

Malicious

ZIP archive

e68d2d1a7d2197da05439af8cb8b7f2b

MD5 e68d2d1a7d2197da05439af8cb8b7f2b · SHA256 b925e430082509e72b54f1d37ca8494487fe5e41ff[...]adc

WScript.Shell DeObfuscated VBScript T1059.005 Obfuscated T1027 PowerShell Batch Command PowerShell Call T1059C2 http[:]//pc-defender.org/count_installs_sms.php?asde=4343&secret=ADJH6wregY&wtf=1&type=silent

811.57 KB 25 days ago

Malicious

Rar archive

75be66b006a76f3236331f193c6cc965

MD5 75be66b006a76f3236331f193c6cc965 · SHA256 760b0559219c1775d5213e020579ef6f37ee16ffa5[...]974

SOS: 0.35 PowerShell Batch Command PowerShell Call WScript.Shell Scripting.FileSystemObject DeObfuscated VBScript T1059.005 Obfuscated

5.82 MB one month ago

Malicious

Portable Executable file

19f88273e1076a090e4ec439c2ee560c

MD5 19f88273e1076a090e4ec439c2ee560c · SHA256 fe892c48559945e7e707a5fed5324ad5c2588de096[...]6d6

PE File Layout Win 32 Exe x86 Blacklist VBA SOS: 0.38 scripting.filesystemobject WScript.Shell WinHttp.WinHttpRequest.5.1 WinHttp.WinHttpRequest.5 ADODB.Stream

4.4 MB one month ago

Malicious

VBScript file

388b9fdaed3877ff39ee9a24622b3f9b

MD5 388b9fdaed3877ff39ee9a24622b3f9b · SHA256 bd5976c72f95a7cc2ff2f54ac1376cf608305a0975[...]a1f

SOS: 0.32 PowerShell Batch Command PowerShell Call Scripting.FileSystemObject WScript.Shell DeObfuscated VBScript T1059.005 ObfuscatedC2 https[:]//8edfe6965fa54744c4be188905ce3ca8.r2.cloudflarestorage.com/cdn-assets-neonstriker99/d/ae413b83-f0f4-40af-a0a9-e61e13d86da7/jre-payload.zip?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=521573746ff25e8dad5ac5bcb4830823%2F20260902%2Fauto%2Fs3%2Faws4_request&X-Amz-Date=20260902T125157Z&X-Amz-Expires=604800&X-Amz-SignedHeaders=host&X-Amz-Signature=ff77c599394550391953a2d1a83084537f149e02fc6cafa96eae29cfddb9fddb

3.95 KB one month ago

Search results