Malicious
Rar Archive
MD5: 2c913210101be25be06a3a9ee97ce80f
Size: 129.52 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
129.52 KB · 129,516 B
First seen
2026-10-14 15:15 · 11 days ago
Last seen
2026-10-14 15:15 · 11 days ago
Last analysis
2026-10-14 15:16 · 11 days ago
Hashes
MD5
2c913210101be25be06a3a9ee97ce80f
Sha1
05d02267b028c535893504b577dd31fb000bc9ea
Sha256
21cd338cf58d002752508fc14a88ccb5b9bb9702da104eb62ee0c53de6119b96
Sha384
624714c07b344557182096cb4ebe0db990d56607683edcd3ffa2712ce6c26ae791b815f2c4892be54f3217b969a95642
Sha512
812afb4edae9d6456d4141f1ed50a84f86893dc188c52015abc62a36ebdc0dbad8b60123d1b46de3a125a77773a689899eb926ff757caad6f1fd94379d7c80b3
SSDeep
3072:VnQIu0TMcyFk3Wt5+Aqa73w/U+bVNQxT8zgTKZIEBu:5Ql0tMiWz+cA/U6qwzgexBu
TLSH
CCC31284A437B8269E0CE5F5D7562AA454B8D02F5BF6982EE1809433338DC28F77F467
7 malicious · 8 files
RAR2c913210101be25be06a3a9ee97ce80fT1027 · T1105 · T1059.001
PS1lwkd-invoice.jsT1027 · T1105 · T1059.001
PS1[PowerShell Command]T1027 · T1105 · T1059.001
BIN[Base64-Block]
PS1[Deobfuscated PS]T1027 · T1105 · T1059.001
PS1[Deobfuscated PS]T1027 · T1105 · T1059.001
PS1[Deobfuscated PS]T1105 · T1059.001
PS1[PowerShell Command]T1105 · T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:rar>scr:ps1~T1027~T1059.001~T1105
Shape
arc:rar>scr:ps1
malicious
2 nodes