Malicious
Rar Archive
MD5: 2e991f44253df774654ff35853135466
Size: 11.28 MB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 2e991f44253df774654ff35853135466 |
| Sha1 | 04a041139a68e3d40f47d4e428ce1bca25f7e1ee |
| Sha256 | d5d1874bec53d5afa09ef36ae3e88630122e14c6f224b14752e5bd014d51fe16 |
| Sha384 | 77896a632414826f6ba95d759044b5079e7416ab317b90baec6a05a64baffaebb21ef73eecc453760cdfb0ac9a8d38c6 |
| Sha512 | ab09e8500c379fe1ac38c3537e22e365f7f2dfbd673701403cf227b8f735e3dc530ecfb62643abc016735b34b7a2f179f91bb3e3d207f78bacedb0c2af3a6ac9 |
| SSDeep | 196608:JNat5ZGfGOSMKFP9QDk/CKC5NqOxd4/9rt6BSQ1Fd4EyVA:Jct5Z6G1MKFP+I//C5N34FroSQf+EyS |
| TLSH | 02B633B7E03B81D94AED2904F25991A000B01DA991731C26F31B6B5ABBE0FF70D6577E |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 13
STICH kept: 5secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
5 / 5
Path
arc:rar>scr:ps1~T1027~T1059.001
Shape
arc:rar>scr:ps1
malicious
2 nodes
Path
arc:rar>arc:zip>arc:zip>scr:vbs~T1059.005
Shape
arc:rar>arc:zip>arc:zip>scr:vbs
technique4 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
@echo
huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential