Suspicious
Suspect

2219c4db52ff75f5dc3ad7eedf4998e4

Share on LinkedIn
Print
ZIP Archive
MD5: 2219c4db52ff75f5dc3ad7eedf4998e4
Size: 2.37 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2219c4db52ff75f5dc3ad7eedf4998e4
Sha1 ba6645dedebec17061b781bba65f37a707f667bf
Sha256 c028bc061adf89d0b570e5ac8a438dc484a1d86e3c67a030256f02ff51ebcbd2
Sha384 9ff5a510be195e2495328e26b01f1aeab2d924ac090cda5a2ef74291a78e1e01434bf70a4122c49f47ccadfdec87eb88
Sha512 7719efbd4e084307fdd2479077fc577a2bdfefa96dbc2175859750fa9ccb5f2adf212ed516170ccaf6dddff81a579fe4aef95d34c131e798f7167456825fcf6d
SSDeep 49152:58hKXINOf1gVgjowD9v7wMDWqLlhmEnD9UjZAcI8twWEzduklL0:uhKcq1wgjow8sMY9qZFI8twVRVi
TLSH F4B5339A19709098D7C41A359F9B11D4FB4F1145DA0DAA388E3DE28D70DA7F7203E2AB
DMIEDIT GUI v5.27.05.0016 (latest)
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
Resources
RT_MANIFEST
ID:0001
ID:1033
Overlay_c3207be5.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
Overlay_e79cd865.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
INIT
.reloc
[Authenticode]_1189483d.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
INIT
[Authenticode]_7bc22eb4.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
PAGE
INIT
.rsrc
.reloc
Resources
RT_RCDATA
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
[Authenticode]_2e463d76.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
PAGE
INIT
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_CURSOR
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
ID:0010
ID:1033
ID:0011
ID:1033
ID:0012
ID:1033
ID:0013
ID:1033
RT_BITMAP
ID:0080
ID:1033
ID:0083
ID:1028
ID:7912
ID:1033
ID:7914
ID:1033
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
RT_MENU
ID:0080
ID:1033
RT_DIALOG
ID:0064
ID:1033
ID:0065
ID:1033
ID:0082
ID:1028
ID:0088
ID:1028
ID:008C
ID:1033
ID:008D
ID:1033
ID:7801
ID:1033
ID:7802
ID:1033
ID:7803
ID:1033
ID:780E
ID:1033
RT_STRING
ID:0009
ID:1033
ID:0801
ID:1033
ID:0802
ID:1033
ID:0E01
ID:1033
ID:0E11
ID:1033
ID:0E12
ID:1033
ID:0E13
ID:1033
ID:0E14
ID:1033
ID:0E15
ID:1033
ID:0E16
ID:1033
ID:0E71
ID:1033
ID:0E81
ID:1033
ID:0EF1
ID:1033
ID:0EF2
ID:1033
ID:0F01
ID:1033
ID:0F02
ID:1033
ID:0F03
ID:1033
ID:0F05
ID:1033
ID:0F11
ID:1033
ID:0F12
ID:1033
ID:0F13
ID:1033
ID:0F14
ID:1033
ID:0F19
ID:1033
ID:0F1A
ID:1033
ID:0F1B
ID:1033
ID:0F1C
ID:1033
ID:0F1D
ID:1033
ID:0F2F
ID:1033
RT_ACCELERATOR
ID:0080
ID:1033
ID:7915
ID:1033
RT_GROUP_CURSOR2
ID:7901
ID:1033
ID:7902
ID:1033
ID:7916
ID:1033
ID:7917
ID:1033
ID:7918
ID:1033
ID:7919
ID:1033
ID:791A
ID:1033
ID:791B
ID:1033
ID:791C
ID:1033
ID:791D
ID:1033
ID:791E
ID:1033
ID:791F
ID:1033
ID:7920
ID:1033
ID:7921
ID:1033
ID:7922
ID:1033
ID:7923
ID:1033
RT_GROUP_CURSOR4
ID:0080
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
RT_TOOLBAR
ID:0080
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙