Malicious
ZIP Archive
MD5: 1139d1a3a3946b335badf35436403d91
Size: 1.43 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1139d1a3a3946b335badf35436403d91 |
| Sha1 | 0bd8776766e15d7f803595d11783ee67b03860e0 |
| Sha256 | 1cc86e48d10d2f9a4d986ade1189cdaa773312db3be38f2031ad6404e843533b |
| Sha384 | b9db2d9d088845d37aee8a9577b380743c118b15df6580bf5b6c336965195342ea5aef5200cb66f6990ffe4019291d82 |
| Sha512 | 0581d5bdc5665736f43e9662e631fbf3ae06da31fd3636efb41109e79fddaeb2987267d36ff81d5a6b512316f9d0c7d811dee568dd9602b07dc9adc8dbe80cc9 |
| SSDeep | 24:9tQvmOsgqNc23YZUZD9aTeSL3EGDsfcCWmkg/5cpeYSp08Oiyt6kBd:9c23YZErelDsfVWTYcpeYC08zyt6kv |
| TLSH | 7721D8024210E081C84EA3F87F329FC5B1571297114BC02F02AF2954FAECE44FFA1AB2 |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$ctceqhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential