Malicious
ZIP Archive
MD5: 03b56909c20ed913b29bb99d40466c3a
Size: 487.15 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
487.15 KB · 487,153 B
First seen
2026-10-06 07:30 · 19 days ago
Last seen
2026-10-06 07:30 · 19 days ago
Last analysis
2026-10-06 07:30 · 19 days ago
Hashes
MD5
03b56909c20ed913b29bb99d40466c3a
Sha1
3dfda3f97b82c03d8aabe31f640b0cf89bda53ef
Sha256
8e5a9ed982dc13efd1b526fad8db307201dab1318ea840b84f6f1bade4834b59
Sha384
c9b4613a1cc4b89cbf9cbf6ff554578272e05e1103ba16cbe7c9bb31a033fdf8b5eab8673b80f1f2ac0493810b0ff439
Sha512
248387a51b1b74f94c15654b9e1d851b5d868905f818eb825d27debc2ad7e510fe3cc5ee75079fea282957c726f71e186b9ba2253126a4075f5a56c5fb353bc0
SSDeep
12288:Er06NUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZ1:Er06NUv4t1cNk/wjibhv4b2OnT
TLSH
3DA4238274716D06D096CFBDD4C1AACAD06E023D352A3BE5639294CABD940367F9BF13
2 malicious · 5 files
ZIP03b56909c20ed913b29bb99d40466c3aT1027 · T1059.005
CMDApplication.cmd
VBScert.txtT1027 · T1059.005
VBScert.txt.deobfuscated.vbsT1059.005
EXEutil.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:vbs~T1027~T1059.005
Shape
arc:zip>scr:vbs
technique2 nodes
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
2 nodes