24469de5d3626fd3df2e58dd7372ea34

ZIP Archive

MD5: 24469de5d3626fd3df2e58dd7372ea34

Size: 329 B

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	24469de5d3626fd3df2e58dd7372ea34
Sha1	e27140ed1e79d3eaa925fcf9e2159cf7d98bbe9d
Sha256	ff3b0f857f42dd14681075feae240b4fe77302cf5d21574fd44a8079e40972d3
Sha384	8fd0065de8ff77faed299263b8130757b53af10bdb1699116ed0ef18b63a2fc8692cf7d1809b6e05267ad13430c7c740
Sha512	82e0dd10494a3be3ad8e32aba9084d6e85a24a6f0d121f6bf04e6f16f64c60a28b30e34529333485ace1654b77e03b80b08a84c005410b60b22e582cf644f992
SSDeep	6:5jAt+03/u9M5FcEAQc96QNmj6CdVH2OFmo7MyOUcMvtsNM/xDL+t+l1X:5jAt+v902dQccQNU6eVWEJrcMvtsNKO6
TLSH	1FE07D31C75E2120D95D24340CE20B3563F0045451367CEF932303460CD2974CF0148A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059~T1059.005

Shape arc:zip>scr:vbs

malicious 2 nodes

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

msihuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

msihuhuhuhu

24469de5d3626fd3df2e58dd7372ea34 › Adobe.vbs

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

24469de5d3626fd3df2e58dd7372ea34 › Adobe.vbs

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

24469de5d3626fd3df2e58dd7372ea34 › Adobe.vbs

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.