Malicious
ZIP Archive
MD5: 0f2a226522a396d832121cd21c5e5523
Size: 486.7 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
486.7 KB · 486,704 B
First seen
2026-10-21 13:02 · 4 days ago
Last seen
2026-10-21 13:02 · 4 days ago
Last analysis
2026-10-21 13:02 · 4 days ago
Hashes
MD5
0f2a226522a396d832121cd21c5e5523
Sha1
de21cda1712d36696b5f40fe12d1fc629a96a7d1
Sha256
5034c607a99b63926bcb81a4648c9149b8dd815aedc1fff808c3b453e415303b
Sha384
96d4ced063f6ee033aab6c86b21a7290dc8ca6e03cd308dcd31ca79e258c85c0fdd4fa57d9353a4bc2fa18e15a2250c0
Sha512
dc113a850910fd03ea97388ffe15179854c612648c41ea7e5e7c49c08fb9a5597476950d1099a13c57799a860986a84e1f6512f8b6de5ebe770b6e18647e9c45
SSDeep
12288:ncBSCDe0U+m1V6ECbniSPfS3e2R3feeintFck0:2De0wUTiSWzeei0
TLSH
81A4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252
2 malicious · 5 files
ZIP0f2a226522a396d832121cd21c5e5523T1027 · T1059.005
BATApplication.bat
VBSkey.txtT1027 · T1059.005
VBSkey.txt.deobfuscated.vbsT1059.005
EXEzen.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:vbs~T1027~T1059.005
Shape
arc:zip>scr:vbs
technique2 nodes
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
2 nodes