Suspicious
Suspect

1cc2dd532749991c7c86244719e961ee

ZIP Archive
MD5: 1cc2dd532749991c7c86244719e961ee
Size: 452.25 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1cc2dd532749991c7c86244719e961ee
Sha1 a7f44abf53e9296062f976396e9fd45a8fb1c047
Sha256 ea7d8820bafb5a64f3aa173da166ddbf8f86f11a5f20aa98f033c48937ce3a6d
Sha384 346be62be841ac1aa6c8ea024f711b8e7972e35fca5cad300e92d505bb3fc6f90e8511c38946430f4418583f0ff6ed3a
Sha512 86de5d18e1e00504cc4d9d52fb78b334307d48c20f9f894ddc6ca71241a78cfa0341be1fcf8aac7de6f922c63c7c5fd59bbffd7ec02895b522986d77d2827aff
SSDeep 12288:c50DrbTwSI7aaXFqDoPf3az/7OReGSlOVExM:zebqDGiWRKlOV6M
TLSH 89A423D692F16B08EE8F0999D44BEBC343BD5B79DC196E2B397B10B80D590A009C4DA2
[Authenticode]_b3a56eef.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0085
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_80a4db87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
SANONTCP
.wpp_sf
.rdata
.data
.pdata
.didat
.rsrc
.reloc
Resources
MUI
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

4 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 4
[Authenticode]_b3a56eef.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0085
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
[Authenticode]_80a4db87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
SANONTCP
.wpp_sf
.rdata
.data
.pdata
.didat
.rsrc
.reloc
Resources
MUI
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙