Malicious
ZIP Archive
MD5: 2144f03b823f608ffddddbd898a36901
Size: 13.94 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 2144f03b823f608ffddddbd898a36901 |
| Sha1 | 32a041bb75258eb5201d8022419febd2b5f9091d |
| Sha256 | ccaecf6418a3f232dfde9f2bdff55c9bdfa2e9e64f565bd302bc07143f02f568 |
| Sha384 | 3cdad46c3f21a23f8ab9883755698d205feb41b4f1621782267a70a32abc215cbf435eaaecdbcca25d061bd315e5bd36 |
| Sha512 | 71030b66409a812c03f2b899be78d9e3162fafcc622cc5f1b4af6231be1344946ec7919206573745a086f30bb568495fa35866131ffe1d2c92259ead5b217e8a |
| SSDeep | 393216:QYuIT5BhxlRW/WT+j3zjkJU+yLOv1S8mMjjFnXRyIN6:QYp/lMFzjaUE1S8mMjjRs |
| TLSH | CCE633DCED6685C6E2CA7D3C63EC39BBC3C85D185AD09126C487B3F136AE1D71562068 |
Malicious
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 14
STICH kept: 5secondary ignored: 9
bin
7img
2Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
5 / 5
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>arc:zip>arc:zip>scr:vbs~T1059.005
Shape
arc:zip>arc:zip>arc:zip>scr:vbs
technique4 nodes
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential