Suspicious
Suspect

0e92f7fb99055dfaa8385f4c84df374a

ZIP Archive
MD5: 0e92f7fb99055dfaa8385f4c84df374a
Size: 492.54 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 0e92f7fb99055dfaa8385f4c84df374a
Sha1 189ca92d33ebeaee4f00f36711a7167f9c98445e
Sha256 6cc05b526583b3afa6e9119dc4db11c40ccb56cb4283f48b4ec2de750c463ea2
Sha384 670d8c404ec2f90b4970f16a38babe7689fa073870b6c5519343306c35fab6cb9c67d92404070ce1309ed3faf4ecf2cb
Sha512 0785087ee2f5dd3c78deb6dbbbe82da1fdb51823576a89126ffedab63163bccd2c54fbaf091008e193ddbcfe4de4f7c3310fc7c56d5a318cd2d6b4fd329fd510
SSDeep 12288:KsS5lyFd6V+6sVXkvgSe5yPqr++rVOje+yH5e:KsgxM6sSvPiy+6eTH5e
TLSH 85A42397E39996EC88C47ABA8B2C0D18B27CE7745CCF07A8537E5335D1688A29E0351D
Launcher.bat
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
proto.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Launcher.bat
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
proto.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙