Suspicious
Suspect

0965a9b98e6defdc1bc822d000c506ba

Share on LinkedIn
Print
ZIP Archive
MD5: 0965a9b98e6defdc1bc822d000c506ba
Size: 10.17 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0965a9b98e6defdc1bc822d000c506ba
Sha1 a1f5bb96d4d279865086ed8531811a29c640af6f
Sha256 347e6daf8e02ca410b31e15d4bb47d888e702905c8d3b6524d51301fb08b7ef5
Sha384 219c4d4f26b0f84913637066db995bb9fdbc4444b127a69294efa3679dbca6dfb717d23c65ba77f28cae379551355c4f
Sha512 049364354d4af6e6f277a48bc8b338d16e5403053e4ca6cb7cd796b9c716fadb95899ec2ee44f18b62a693d878716eef60e8d5bc46b90b25fbb32b184755409a
SSDeep 196608:hxC/kBLk3xZUjtdkVkfMIK65COJ65qnG95zV5IEZinC0/UML7OkCl9zrHIy:hIMBWxZUjbkVkUIKYCf51VF0/NOkCl9J
TLSH A6A633FAA8B21E3370D2C7E4355E8857364CB033A9F76A4864E7D0E517621B778113AE
Overlay_6e6c08fd.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0006
ID:0
ID:0007
ID:0
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
README.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe>scr:vbs
Shape arc:zip>pe:exe>scr:vbs
3 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙