Malicious
Malicious

0abbf459ff02d15cf9228e0d1448793d

Share on LinkedIn
Print
Rar Archive
MD5: 0abbf459ff02d15cf9228e0d1448793d
Size: 1.03 MB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0abbf459ff02d15cf9228e0d1448793d
Sha1 3833d44024bccb0a39b95e296d192f524ca79e56
Sha256 e1eb093add73f3f141a3e89c12cb391e280bbfbb252faaf16d7b7fd9505fddc8
Sha384 419a98edeb4b3b14a3d8f852611d24ef083f36dedb4e53cb6d37867e656fe0ce0462bbd42953b27bc8bda230477eddca
Sha512 237997824319a8dfb1c1466cecc4186e2f2867c512e03529532a59973b2c7cbd80ab078749c8dcd2a9239166e73b4ec97eafc3e0b114309e5fb35c37c4d3c585
SSDeep 24576:cZDglRVLPJeMdgYHgaor6EsPJq+kurJZOXBq9s9b5:ccLLcMdbHgqRqzmLOXBqE9
TLSH 30253391C499C63437675F4A48B270EA33F885B83E6D9D78BE2FAC07575EFC9180058A
.Net Resources
LmS.nmb.resources
$this.Icon
[NBF]root.IconData
Pro
[NBF]root.Data
backgroundWorker1.TrayLocation
Wmv.em2.resources
Imd.XmK.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
NeuralLinkDataMiner.Properties.Resources.resources
lqnp
[NBF]root.Data
[NBF]root.Data-preview.png
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path arc:rar>pe:exe>pe:rsrc>img
Shape arc:rar>pe:exe>pe:rsrc>img
malicious 4 nodes
Path arc:rar>pe:exe>pe:rsrc>bin
Shape arc:rar>pe:exe>pe:rsrc>bin
malicious 4 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙