Suspicious
Suspect

1bd05d4593bfefc24760e9065d113941

ZIP Archive
MD5: 1bd05d4593bfefc24760e9065d113941
Size: 584.48 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1bd05d4593bfefc24760e9065d113941
Sha1 96e680bafb94b5397b09dbbed8e475623871ca14
Sha256 29d7e72c95e01f5da25131d172f28cc6e0fec80869f1d24a20cb4b278c44735f
Sha384 f984f974cc26448a7461ece17bb6300b35802aa0ea242ce7b9b40a594b870e7f8053b7e6e4895a387de9244e7ef22bd9
Sha512 14b0a91b3c7d2a173ed720572c268e880a45edb65352332b6a77a797c9a31cf5cf0cf0d272d3d84d3bb7b3fae591a21d9999c6487cfead0252f318c9fa50c386
SSDeep 12288:36wlOMWROC/FTeHo22Qm7NzofOr68m1eA924EwCn:P4MQOC/gHozN7NzomW8DA9A
TLSH ECC42304340641D5835A2B1EAEC4E7E1BEB560DBFA1CF940AADD7ED06DE92A173C1837
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙