Malicious
ZIP Archive
MD5: 3a8a75ed5c43572b70fe1a4363c9497e
Size: 11.27 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 3a8a75ed5c43572b70fe1a4363c9497e |
| Sha1 | 60326febdebb6f5c791b454fbda10315601b8be0 |
| Sha256 | 22874b6a6184d2f77ba2c24b8948fe2af261aea99d641423e4c69644b994e6ea |
| Sha384 | 40946c3e38b94de4a0951af33a72345a1ba23018e0c40066eec64d239e543cea0639be894c2532e24a2c308f483711d9 |
| Sha512 | 99f4ae2feb79e5bcf9de48c13bdb7b9a12ce3aed93d3d36fb2f3348a3f34f400481fcffdb6c76744cb10a53607dea222a3d55ea0c71122a534cf228765a9f371 |
| SSDeep | 196608:roslj+RxnaqYfoYhvhVo6PfrlPW2zvT6VpsaurXkJWcaiJ5uQdQnBhK:rflinDUh7o67QaT6vslTkJWlQdQnBQ |
| TLSH | A3B633E8C6413CCDE8C7BA3D87E819EAE9C9CA378A10D5E6D145A3E024BE1FD1C51457 |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 13
STICH kept: 5secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
5 / 5
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>arc:zip>arc:zip>scr:vbs~T1059.005
Shape
arc:zip>arc:zip>arc:zip>scr:vbs
technique4 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
@echo
huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential