Suspicious
Suspect

2b7c916bf115c3ccbe38006f9af57c12

ZIP Archive
MD5: 2b7c916bf115c3ccbe38006f9af57c12
Size: 124.03 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2b7c916bf115c3ccbe38006f9af57c12
Sha1 f5b13cf7657ebc61116982d49a78ffcf41577801
Sha256 bbda40503c9a21d1ba04b7688d91db7bdbfa6db9dc4ebd828e0506c0a1b9b8cb
Sha384 b3dd4944a26c47ceeb4d160edd3ea9d36418a2e3c568b92e0264fc985bd4617ce31d70f8c01ddca46cf28b926488fbf3
Sha512 f6d69e6f3e87703f7bd35ccc758e401cc26af3c6e2afe95cb35a4a9a3e6e8229a49adcc348e5644432a85be4d1317f0f469cfdacce227870ed089f7dca1349c7
SSDeep 3072:CwvfGSX/gM+ov/jwGX9CzpdAd9bw5E9w4ac6pi4K:CwvfG+gMXv/RwdA/bL+4F683
TLSH 87C3126DFE9F1E81C5C0B1B452024BE122281E9D5B179B10CBA61CECFB57FD8748E446
.Net Resources
000.g.resources
Creep.Properties.Resources.resources
_000
street
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.code
.text
.rdata
.data
.rsrc
Resources
RT_RCDATA
ID:0000
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
texticon
txt
windl
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe>rtf
Shape arc:zip>pe:exe>rtf
3 nodes
.Net Resources
000.g.resources
Creep.Properties.Resources.resources
_000
street
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.code
.text
.rdata
.data
.rsrc
Resources
RT_RCDATA
ID:0000
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
texticon
txt
windl
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙