Suspicious
Suspect

3c97baa54a1512cca595c9262cb9bd85

ZIP Archive
MD5: 3c97baa54a1512cca595c9262cb9bd85
Size: 584.48 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3c97baa54a1512cca595c9262cb9bd85
Sha1 cab20d9ee23326f2f2b279062aa19b525b62eb2d
Sha256 675d10fc98f8a80216dc7562146fc2c9535cb12bc998432afc3f4e3c1573f953
Sha384 2a873ca757e6754a19512d827f6a60b76a42dac8d3bb1fb4c121b84018d6e22306f0286b212f0fa965db64f5f60a098e
Sha512 48643ca1984002cbdbf9298c72a56d752e9b9b25c34f05edf653b4d33d2de24cedb4a9f1f1f2aba1561ae9249e7971b5daefb10ad7000a911e75a1c5e322071d
SSDeep 12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mTeA924EwCF:74MQOC/gHozN7NzomW8NA9q
TLSH 8EC42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C1837
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙