Malicious
Malicious

0aa928627088f5789901d16cae62d5a8

Share on LinkedIn
Print
ZIP Archive
MD5: 0aa928627088f5789901d16cae62d5a8
Size: 837.35 KB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0aa928627088f5789901d16cae62d5a8
Sha1 8378e098886c04d2d133e5c4f67a951669213e2a
Sha256 a355496c47d79ab9ad373d34192e1d47580668642436912caf5b215d27db02be
Sha384 022e1c3daf4a3b45f8891876a64af6ee7dbc2fccff47b4bde13126f4acba9d0e9db112f9c16c0de3a527aadad428396f
Sha512 5aac8c050c221aa693f41cd7debe348be9085fe9c37e293afd2e2d33dbebda66842665ca4f5249b2fa41a938bb3ed5a2c021f787075b4ff9995e8aa27fb83cf8
SSDeep 24576:SEKWhrgvJ/tCgalVFTYp746l6Q+IwVn+dw:SRWhwVbuTYt46l6Wan+dw
TLSH 640523F2F5868B4D61C2ABED10A18E1E97A03DF4D587A35F10F04592A3492F7ADF894C
0aa928627088f5789901d16cae62d5a8
Malicious
aletheia-unified-verification-environment-proposal.pdf.lnk
Malicious
PDF @0x000001C9
Malicious
[PowerShell Command]
Malicious
PDF @0x000060FA
#Stream obj 160 0
#Stream obj 159 0
#Stream obj 164 0
#Stream obj 156 0
#Stream obj 155 0
#Stream obj 163 0
#Stream obj 4 0
#Stream obj 29 0
#Stream obj 40 0
#Stream obj 167 0
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
published-solidity-testing-environments.pdf.lnk
Malicious
PDF @0x000001B3
Malicious
[PowerShell Command]
Malicious
PDF @0x000060D0
Text (Preview)
Page #1
#Stream obj 92 0
#Stream obj 91 0
#Stream obj 96 0
#Stream obj 4 0
#Stream obj 21 0
#Stream obj 32 0
#Stream obj 98 0
Structure
LNK CommandLine
Malicious
[PowerShell Command]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[Base64-Block]
Malicious
[PowerShell Command]
Malicious
[Lnk Summary]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1059.001>pdf>pdf:stream>bin
Shape arc:zip>lnk>scr:ps1>pdf>pdf:stream>bin
malicious 6 nodes
Path arc:zip>lnk~T1027~T1059.001~T1059.003~T1202~T1204.002~T1218>scr:ps1~T1027~T1059.001>pdf>pdf:stream>bin
Shape arc:zip>lnk>scr:ps1>pdf>pdf:stream>bin
malicious 6 nodes
Name Value
Version
1.5
Author
AI Doc Maker
CreationDate
D:20261018190053-07'00'
Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
ModifiedDate
D:20261018190053-07'00'
Subject
Overview of frameworks, local simulators, browser IDEs, and public testnets
Title
Choosing a Solidity Testing Environment
Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
Version
1.5
Author
OpenAI
CreationDate
D:20261018190423-07'00'
Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
ModifiedDate
D:20261018190423-07'00'
Subject
Concept proposal for an integrated Solidity testing and verification environment
Title
Aletheia: A Unified, AI-Augmented Verification Environment
Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/Title
Choosing a Solidity Testing Environment
/Author
AI Doc Maker
/Subject
Overview of frameworks, local simulators, browser IDEs, and public testnets
/Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/CreationDate
D:20261018190053-07'00'
/ModDate
D:20261018190053-07'00'
/Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/Title
Aletheia: A Unified, AI-Augmented Verification Environment
/Author
OpenAI
/Subject
Concept proposal for an integrated Solidity testing and verification environment
/Creator
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
/CreationDate
D:20261018190423-07'00'
/ModDate
D:20261018190423-07'00'
/Producer
??�M�i�c�r�o�s�o�f�t�?� �W�o�r�d� �2�0�1�3
Deobfuscated PowerShell UNKNWOWNmalicious
updatehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$rukp huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$encryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙