EvilNum_PyVil[.]zip

Sharing

Target

EvilNum_PyVil.zip
Size

5.4MB
MD5

bc864f30fab6440bda24050e97abc667
SHA1

9463f9d397c68b81a4088ffdf56ed2032e7e71e3
SHA256

0d878b1b9f5c1ae8925e55df9e10b4271eb99970af133e251830044d24296ba8
SHA512

e4e8c91db03cbd18c5a777e40482651ca9564714c5221d2e27e12598673c2155b41c7506b2087442b75ca1fe218442cbaa472b1fb0455b4a0f4e7c9cf4c1985d

Score

6^/10

JavaScript code in executable 6 IoCs

Processes:

resource	yara_rule
static1/unpack001/0d7dc074be83f1096f39ba95bfc4e1a17c411dbed0e5eeeb48e88a12d79b541c	js
static1/unpack001/3b7cd07e87902deae4b482e987dea9e25a93a55ec783884e8b466dc55c346bce	js
static1/unpack001/83c375dcdadb8467955f5e124cf4e8d6eac78c51c03fb7393dc810a243ba1a90	js
static1/unpack001/c7cf5c62ecfade27338acb2cc91a06c2615dbb97711f2558a9379ee8a5306720	js
static1/unpack001/db5d09edc2e9676a41f26f5f4310df9d13abdae8011b1d37af7139008362d5f1	js
static1/unpack001/f5f79e2169db3bbe7b7ae3ff4a0f40659d11051e69ee784f5469659a708e829e	js

EvilNum_PyVil.zip
.zip

Password: infected
0d7dc074be83f1096f39ba95bfc4e1a17c411dbed0e5eeeb48e88a12d79b541c
.js
3b7cd07e87902deae4b482e987dea9e25a93a55ec783884e8b466dc55c346bce
.lnk
79e21ff9142821b2e3d6e3dc8d812e86da231dbbd1217415b4add748a4c1ce3c
.exe windows x86
83c375dcdadb8467955f5e124cf4e8d6eac78c51c03fb7393dc810a243ba1a90
.lnk
a81f152a31c03b45dbcf29439050bbe080b1f6308b032aebc0205886d1f41e5d
.exe windows x86
c7cf5c62ecfade27338acb2cc91a06c2615dbb97711f2558a9379ee8a5306720
.lnk
cff5ed4de201256678c7c068c1dbda5c47f4b322b618981693b1fd07a0ea7e68
.lnk .js
db5d09edc2e9676a41f26f5f4310df9d13abdae8011b1d37af7139008362d5f1
.lnk
e678ec3dbccfbd5cf0f303d2841e726ac7628044de5297bf9ebe791d66270a2f
.exe windows x86
f5f79e2169db3bbe7b7ae3ff4a0f40659d11051e69ee784f5469659a708e829e
.lnk