Suspicious
Suspect

05cd3835bbd922f81d7c460282defa8c

ZIP Archive
MD5: 05cd3835bbd922f81d7c460282defa8c
Size: 51.9 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 05cd3835bbd922f81d7c460282defa8c
Sha1 352505b1ead415b4391d7244d09f22773ee43fe5
Sha256 579b8d0e88983ef08a2db7ff531b66b4f71b72e86d6ef6557dcab11c145e9643
Sha384 e6202ffca2be1206245cba9dc44b408c9fcca157a648d8cf0e3a0ef9c52066e8e476bff628a4527d20fe58027c660bb5
Sha512 c87680f33833d40d67a0b9d9983dd3a76839b2b8ebcc925508c99bdb6babf8af5aa956a13db3bfca16d9a7814fd1de71903868545e4c993c4d83b3ebebc21249
SSDeep 1536:jpGyf7WOnScGDvBoyPGGSxygAORe9ei86c0yOiK1VyRvT:j8tOnSRvBoyP9S4q6VnylT
TLSH EB33F9F7B280BDF9987901F48EFA8F8A11542D164579D888DC2AD5FB4F22A94ED3044F
05cd3835bbd922f81d7c460282defa8c
[Base64-Block@0x000013B7]
[Base64-Block-Decoded]
Agencia_Tributaria_КомпПак_5391.hta
_68
OptUpd_590
manifest_8366d7.xml
ModRun_384
component_42e5da.xml
AdjDrv_382
LEIA-ME.txt
OptPrv_465
data_f3919e.txt
SysCfg_437
data_9e5d80.xml
PkgRun_177
data_80e603.dat
ValMod_166
data_03d082.cfg
PkgPrv_409
data_82d8ab.txt
SysSet_816
data_ab8754.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>enc:b64
Shape arc:zip>enc:b64
2 nodes
Path arc:zip>html
Shape arc:zip>html
2 nodes
05cd3835bbd922f81d7c460282defa8c
[Base64-Block@0x000013B7]
[Base64-Block-Decoded]
Agencia_Tributaria_КомпПак_5391.hta
_68
OptUpd_590
manifest_8366d7.xml
ModRun_384
component_42e5da.xml
AdjDrv_382
LEIA-ME.txt
OptPrv_465
data_f3919e.txt
SysCfg_437
data_9e5d80.xml
PkgRun_177
data_80e603.dat
ValMod_166
data_03d082.cfg
PkgPrv_409
data_82d8ab.txt
SysSet_816
data_ab8754.xml
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙