2c913210101be25be06a3a9ee97ce80f

Rar Archive

MD5: 2c913210101be25be06a3a9ee97ce80f

Size: 129.52 KB

application/vnd.rar

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

Rar archive

Size

129.52 KB · 129,516 B

First seen

2026-10-14 15:15 · 11 days ago

Last seen

2026-10-14 15:15 · 11 days ago

Last analysis

2026-10-14 15:16 · 11 days ago

Hashes

MD5 2c913210101be25be06a3a9ee97ce80f Sha1 05d02267b028c535893504b577dd31fb000bc9ea Sha256 21cd338cf58d002752508fc14a88ccb5b9bb9702da104eb62ee0c53de6119b96 Sha384 624714c07b344557182096cb4ebe0db990d56607683edcd3ffa2712ce6c26ae791b815f2c4892be54f3217b969a95642 Sha512 812afb4edae9d6456d4141f1ed50a84f86893dc188c52015abc62a36ebdc0dbad8b60123d1b46de3a125a77773a689899eb926ff757caad6f1fd94379d7c80b3 SSDeep 3072:VnQIu0TMcyFk3Wt5+Aqa73w/U+bVNQxT8zgTKZIEBu:5Ql0tMiWz+cA/U6qwzgexBu TLSH CCC31284A437B8269E0CE5F5D7562AA454B8D02F5BF6982EE1809433338DC28F77F467

7 malicious · 8 files

RAR2c913210101be25be06a3a9ee97ce80f

PS1lwkd-invoice.js

PS1[PowerShell Command]

BIN[Base64-Block]

PS1[Deobfuscated PS]

PS1[PowerShell Command]

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:rar>scr:ps1~T1027~T1059.001~T1105

Shape arc:rar>scr:ps1

malicious 2 nodes

7 malicious · 8 files

RAR2c913210101be25be06a3a9ee97ce80f

PS1lwkd-invoice.js

PS1[PowerShell Command]

BIN[Base64-Block]

PS1[Deobfuscated PS]

PS1[PowerShell Command]

No malware configuration was found at this point.