Malicious
ZIP Archive
MD5: 158f82914ae8620a0f035a0e5ae415a1
Size: 368.62 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
368.62 KB · 368,615 B
First seen
2026-07-10 11:28 · 3 months ago
Last seen
2026-07-10 11:28 · 3 months ago
Last analysis
2026-07-12 23:12 · 3 months ago
Hashes
MD5
158f82914ae8620a0f035a0e5ae415a1
Sha1
31a90c771286c0b38edb84185046dad5ac3e9753
Sha256
0034c2660d7e55831052cf3b111509564c8575922f0f8c68913faa4bb9e20775
Sha384
f3219242f1319483c05382c626c011b92822ba975d99e55dbde8f48bf0a63007375ddb9c9689756b05f448d875846661
Sha512
bac3bf01b5c1aaf4e0f3de6f760040f82fa681d4431867b946803eec38815a81cc6fdd170c83d39987fe4f407e44a1e3fa1767fedb755b34334ebf07a93de04b
SSDeep
6144:ywHyoJEOvVYafvlYJPuDgQ9b9RomWT1kCZuaw4MHHlZFnNbQjRwRdY3+d:pyojW0GGDg49aDTFE4MHF31QjIdWW
TLSH
5D740208F58F3FF5FEE271BC286E922696459094119C6DE7C3F78574189B0292EB07AC
5 malicious · 94 files
ZIPdnYara-master.zipT1027 · T1059.001
BINdnYara-master
BIN.gitattributes
BIN.github
BIN.gitignore
BIN.gitmodules
MDINTEROP.md
BINLICENSE
BINLibraries
BINdnYara.Interop
BINInterops
CSConstants.cs
CSDelegates.cs
BINEnums
PS1Methods.csT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
CSObjRefHelper.cs
BINTypes
BINdnYara.Interop.csproj
BINdnYara.NativePack
MDREADME.md
BINResources
BINSamples
BINUnitTests
BATbuild_yara.bat
SLNdnYara.sln
BINdnYara
BINlibs
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
arc:zip>arc:entry>pe:dll>pe:rsrc>bin
Shape
arc:zip>arc:entry>pe:dll>pe:rsrc>bin
malicious
5 nodes
Path
arc:zip>arc:entry>bin
Shape
arc:zip>arc:entry>bin
malicious
3 nodes