Malicious
Malicious

40f747b537eb469e2d106ec2e8bf4860

Disk Image
MD5: 40f747b537eb469e2d106ec2e8bf4860
Size: 23.8 MB
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Disk image
Size
23.8 MB · 23,797,760 B
Hashes
MD5 40f747b537eb469e2d106ec2e8bf4860 Sha1 8773a14a80f23ec6ce9c5eae72480e7c18d8daf3 Sha256 8b88b5ce9263f49cbc0a2f05d754a75a860e970ceb9eb416cb767595a1d2451b Sha384 9203d44c8eb0c0f619dc5780a179e81fdf02295ee33b63479f3813d848004c8a20266379d63200045a5a3d3b834f6d76 Sha512 746ec7357d8e2178ac474d7c597f17298230c9ab1e77e4429bc144f5ee38fcc48d23abda8e048f75cd0986b381501777bcc36362d5764b043ea28df46d2abbd7 SSDeep 393216:boJesJnkfBTky1b4UyhT/evPMRL31CPwDvt3uFhCkcFe9Xbp8kY3ucN6OyVBlH:2efBTky1DEBNuc8lr TLSH 0D37BE16B2988199D467907CC853865BE3B2BC25AB6183DF30A6B32D1F337D12B7E354
3 malicious · 712 files
ISO40f747b537eb469e2d106ec2e8bf4860
EXEAdobe Installer.exe
Structure
P7B[Authenticode]_8b0b3763.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:1033
IMGID:1033-preview.png
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0001
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
TXTLICENSE.txt
_PTHpython312._pth
DLLpython312.dll
Structure
P7B[Authenticode]_d963ae85.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140.dll
Structure
P7B[Authenticode]_87ed8b9b.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLvcruntime140_1.dll
Structure
P7B[Authenticode]_abae8cb4.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINlib
EXE_asyncio.pyd
Structure
P7B[Authenticode]_8b027990.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_bz2.pyd
Structure
P7B[Authenticode]_e530bd4c.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ctypes.pyd
Structure
P7B[Authenticode]_8e4257e2.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_decimal.pyd
Structure
P7B[Authenticode]_ee6cc08e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_elementtree.pyd
Structure
P7B[Authenticode]_d1a1db8a.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_hashlib.pyd
Structure
P7B[Authenticode]_0e516f64.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_lzma.pyd
Structure
P7B[Authenticode]_a735351d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_msi.pyd
Structure
P7B[Authenticode]_26fcd445.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_multiprocessing.pyd
Structure
P7B[Authenticode]_228d5a2e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_overlapped.pyd
Structure
P7B[Authenticode]_557f6b07.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_queue.pyd
Structure
P7B[Authenticode]_4c0b7eba.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_socket.pyd
Structure
P7B[Authenticode]_4d4a65ae.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_sqlite3.pyd
Structure
P7B[Authenticode]_e9318aff.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_ssl.pyd
Structure
P7B[Authenticode]_9f7fa69f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_uuid.pyd
Structure
P7B[Authenticode]_51142cdd.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_wmi.pyd
Structure
P7B[Authenticode]_d52ab9fd.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXE_zoneinfo.pyd
Structure
P7B[Authenticode]_deccf378.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DATblind_engine.dat
DATcore.dat
DLLlibcrypto-3.dll
Structure
P7B[Authenticode]_80d0cb55.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
DLLlibffi-8.dll
Structure
P7B[Authenticode]_398cf2a2.p7b
DLLlibssl-3.dll
Structure
P7B[Authenticode]_1fdfa05c.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEpyexpat.pyd
Structure
P7B[Authenticode]_693da7d8.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
CATpython.cat
DLLpython3.dll
Structure
P7B[Authenticode]_7ac90db2.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
ZIPpython312.zip
PYCabc.pyc
PYCaifc.pyc
PYCantigravity.pyc
PYCargparse.pyc
PYCast.pyc
PYCbase64.pyc
PYCbdb.pyc
PYCbisect.pyc
PYCbz2.pyc
PYCcalendar.pyc
PYCcgi.pyc
PYCcgitb.pyc
PYCchunk.pyc
PYCcmd.pyc
PYCcode.pyc
PYCcodecs.pyc
PYCcodeop.pyc
PYCcolorsys.pyc
PYCcompileall.pyc
PYCconfigparser.pyc
PYCcontextlib.pyc
PYCcontextvars.pyc
PYCcopy.pyc
PYCcopyreg.pyc
PYCcProfile.pyc
PYCcrypt.pyc
PYCcsv.pyc
PYCdataclasses.pyc
PYCdatetime.pyc
PYCdecimal.pyc
PYCdifflib.pyc
PYCdis.pyc
PYCdoctest.pyc
PYCenum.pyc
PYCfilecmp.pyc
PYCfileinput.pyc
PYCfnmatch.pyc
PYCfractions.pyc
PYCftplib.pyc
PYCfunctools.pyc
PYCgenericpath.pyc
PYCgetopt.pyc
PYCgetpass.pyc
PYCgettext.pyc
PYCglob.pyc
PYCgraphlib.pyc
PYCgzip.pyc
PYChashlib.pyc
PYCheapq.pyc
PYChmac.pyc
PYCimaplib.pyc
PYCimghdr.pyc
PYCinspect.pyc
PYCio.pyc
PYCipaddress.pyc
PYCkeyword.pyc
PYClinecache.pyc
PYClocale.pyc
PYClzma.pyc
PYCmailbox.pyc
PYCmailcap.pyc
PYCmimetypes.pyc
PYCmodulefinder.pyc
PYCnetrc.pyc
PYCnntplib.pyc
PYCntpath.pyc
PYCnturl2path.pyc
PYCnumbers.pyc
PYCopcode.pyc
PYCoperator.pyc
PYCoptparse.pyc
PYCos.pyc
PYCpathlib.pyc
PYCpdb.pyc
PYCpickle.pyc
PYCpickletools.pyc
PYCpipes.pyc
PYCpkgutil.pyc
PYCplatform.pyc
PYCplistlib.pyc
PYCpoplib.pyc
PYCposixpath.pyc
PYCpprint.pyc
PYCprofile.pyc
PYCpstats.pyc
PYCpty.pyc
PYCpyclbr.pyc
PYCpydoc.pyc
PYCpy_compile.pyc
PYCqueue.pyc
PYCquopri.pyc
PYCrandom.pyc
PYCreprlib.pyc
PYCrlcompleter.pyc
PYCrunpy.pyc
PYCsched.pyc
PYCsecrets.pyc
PYCselectors.pyc
PYCshelve.pyc
PYCshlex.pyc
PYCshutil.pyc
PYCsignal.pyc
PYCsite.pyc
PYCsmtplib.pyc
PYCsndhdr.pyc
PYCsocket.pyc
PYCsocketserver.pyc
PYCsre_compile.pyc
PYCsre_constants.pyc
PYCsre_parse.pyc
PYCssl.pyc
PYCstat.pyc
PYCstatistics.pyc
PYCstring.pyc
PYCstringprep.pyc
PYCstruct.pyc
PYCsubprocess.pyc
PYCsunau.pyc
PYCsymtable.pyc
PYCsysconfig.pyc
PYCtabnanny.pyc
PYCtarfile.pyc
PYCtelnetlib.pyc
PYCtempfile.pyc
PYCtextwrap.pyc
PYCthis.pyc
PYCthreading.pyc
PYCtimeit.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYCtrace.pyc
PYCtraceback.pyc
PYCtracemalloc.pyc
PYCtty.pyc
PYCtypes.pyc
PYCtyping.pyc
PYCuu.pyc
PYCuuid.pyc
PYCwarnings.pyc
PYCwave.pyc
PYCweakref.pyc
PYCwebbrowser.pyc
PYCxdrlib.pyc
PYCzipapp.pyc
PYCzipimport.pyc
PYC_aix_support.pyc
PYC_collections_abc.pyc
PYC_compat_pickle.pyc
PYC_compression.pyc
PYC_markupbase.pyc
PYC_osx_support.pyc
PYC_pydatetime.pyc
PYC_pydecimal.pyc
PYC_pyio.pyc
PYC_pylong.pyc
PYC_py_abc.pyc
PYC_sitebuiltins.pyc
PYC_strptime.pyc
PYC_threading_local.pyc
PYC_weakrefset.pyc
PYC__future__.pyc
PYC__hello__.pyc
BINasyncio
VBSbase_events.pyc
PYCbase_futures.pyc
PYCbase_subprocess.pyc
PYCbase_tasks.pyc
PYCconstants.pyc
PYCcoroutines.pyc
PYCevents.pyc
PYCexceptions.pyc
PYCformat_helpers.pyc
PYCfutures.pyc
PYClocks.pyc
PYClog.pyc
PYCmixins.pyc
PYCproactor_events.pyc
PYCprotocols.pyc
PYCqueues.pyc
PYCrunners.pyc
PYCselector_events.pyc
PYCsslproto.pyc
PYCstaggered.pyc
PYCstreams.pyc
PYCsubprocess.pyc
PYCtaskgroups.pyc
PYCtasks.pyc
PYCthreads.pyc
PYCtimeouts.pyc
PYCtransports.pyc
PYCtrsock.pyc
PYCunix_events.pyc
PYCwindows_events.pyc
PYCwindows_utils.pyc
PYC__init__.pyc
PYC__main__.pyc
BINcollections
PYCabc.pyc
PYC__init__.pyc
BINconcurrent
PYC__init__.pyc
BINfutures
PYCprocess.pyc
PYCthread.pyc
PYC_base.pyc
PYC__init__.pyc
BINctypes
PYCutil.pyc
PYCwintypes.pyc
PYC_aix.pyc
PYC_endian.pyc
PYC__init__.pyc
BINmacholib
PYCdyld.pyc
PYCdylib.pyc
BINfetch_macholib
BATfetch_macholib.bat
PYCframework.pyc
BINREADME.ctypes
PYC__init__.pyc
BINcurses
PYCascii.pyc
PYChas_key.pyc
PYCpanel.pyc
PYCtextpad.pyc
PYC__init__.pyc
BINdbm
PYCdumb.pyc
PYCgnu.pyc
PYCndbm.pyc
PYC__init__.pyc
BINemail
RSTarchitecture.rst
PYCbase64mime.pyc
PYCcharset.pyc
PYCcontentmanager.pyc
PYCencoders.pyc
PYCerrors.pyc
PYCfeedparser.pyc
PYCgenerator.pyc
PYCheader.pyc
PYCheaderregistry.pyc
PYCiterators.pyc
PYCmessage.pyc
PYCparser.pyc
PYCpolicy.pyc
PYCquoprimime.pyc
PYCutils.pyc
PYC_encoded_words.pyc
PYC_header_value_parser.pyc
PYC_parseaddr.pyc
PYC_policybase.pyc
PYC__init__.pyc
BINmime
PYCapplication.pyc
PYCaudio.pyc
PYCbase.pyc
PYCimage.pyc
PYCmessage.pyc
PYCmultipart.pyc
PYCnonmultipart.pyc
PYCtext.pyc
PYC__init__.pyc
BINencodings
PYCaliases.pyc
PYCascii.pyc
PYCbase64_codec.pyc
PYCbig5.pyc
PYCbig5hkscs.pyc
PYCbz2_codec.pyc
PYCcharmap.pyc
PYCcp037.pyc
PYCcp1006.pyc
PYCcp1026.pyc
PYCcp1125.pyc
PYCcp1140.pyc
PYCcp1250.pyc
PYCcp1251.pyc
PYCcp1252.pyc
PYCcp1253.pyc
PYCcp1254.pyc
PYCcp1255.pyc
PYCcp1256.pyc
PYCcp1257.pyc
PYCcp1258.pyc
PYCcp273.pyc
PYCcp424.pyc
PYCcp437.pyc
PYCcp500.pyc
PYCcp720.pyc
PYCcp737.pyc
PYCcp775.pyc
PYCcp850.pyc
PYCcp852.pyc
PYCcp855.pyc
PYCcp856.pyc
PYCcp857.pyc
PYCcp858.pyc
PYCcp860.pyc
PYCcp861.pyc
PYCcp862.pyc
PYCcp863.pyc
PYCcp864.pyc
PYCcp865.pyc
PYCcp866.pyc
PYCcp869.pyc
PYCcp874.pyc
PYCcp875.pyc
PYCcp932.pyc
PYCcp949.pyc
PYCcp950.pyc
PYCeuc_jisx0213.pyc
PYCeuc_jis_2004.pyc
PYCeuc_jp.pyc
PYCeuc_kr.pyc
PYCgb18030.pyc
PYCgb2312.pyc
PYCgbk.pyc
PYChex_codec.pyc
PYChp_roman8.pyc
PYChz.pyc
PYCidna.pyc
PYCiso2022_jp.pyc
PYCiso2022_jp_1.pyc
PYCiso2022_jp_2.pyc
PYCiso2022_jp_2004.pyc
PYCiso2022_jp_3.pyc
PYCiso2022_jp_ext.pyc
PYCiso2022_kr.pyc
PYCiso8859_1.pyc
PYCiso8859_10.pyc
PYCiso8859_11.pyc
PYCiso8859_13.pyc
PYCiso8859_14.pyc
PYCiso8859_15.pyc
PYCiso8859_16.pyc
PYCiso8859_2.pyc
PYCiso8859_3.pyc
PYCiso8859_4.pyc
PYCiso8859_5.pyc
PYCiso8859_6.pyc
PYCiso8859_7.pyc
PYCiso8859_8.pyc
PYCiso8859_9.pyc
PYCjohab.pyc
PYCkoi8_r.pyc
PYCkoi8_t.pyc
PYCkoi8_u.pyc
PYCkz1048.pyc
PYClatin_1.pyc
PYCmac_arabic.pyc
PYCmac_croatian.pyc
PYCmac_cyrillic.pyc
PYCmac_farsi.pyc
PYCmac_greek.pyc
PYCmac_iceland.pyc
PYCmac_latin2.pyc
PYCmac_roman.pyc
PYCmac_romanian.pyc
PYCmac_turkish.pyc
PYCmbcs.pyc
PYCoem.pyc
PYCpalmos.pyc
PYCptcp154.pyc
PYCpunycode.pyc
PYCquopri_codec.pyc
PYCraw_unicode_escape.pyc
PYCrot_13.pyc
PYCshift_jis.pyc
PYCshift_jisx0213.pyc
PYCshift_jis_2004.pyc
PYCtis_620.pyc
PYCundefined.pyc
PYCunicode_escape.pyc
PYCutf_16.pyc
PYCutf_16_be.pyc
PYCutf_16_le.pyc
PYCutf_32.pyc
PYCutf_32_be.pyc
PYCutf_32_le.pyc
PYCutf_7.pyc
PYCutf_8.pyc
PYCutf_8_sig.pyc
PYCuu_codec.pyc
PYCzlib_codec.pyc
PYC__init__.pyc
BINhtml
PYCentities.pyc
PYCparser.pyc
PYC__init__.pyc
BINhttp
PYCclient.pyc
PYCcookiejar.pyc
HTMcookies.pyc
PYCserver.pyc
PYC__init__.pyc
BINimportlib
PYCabc.pyc
PYCmachinery.pyc
PYCreaders.pyc
PYCsimple.pyc
PYCutil.pyc
PYC_abc.pyc
PYC_bootstrap.pyc
PYC_bootstrap_external.pyc
PYC__init__.pyc
BINmetadata
PYC_adapters.pyc
PYC_collections.pyc
PYC_functools.pyc
PYC_itertools.pyc
PYC_meta.pyc
PYC_text.pyc
PYC__init__.pyc
BINresources
PYCabc.pyc
PYCreaders.pyc
PYCsimple.pyc
PYC_adapters.pyc
PYC_common.pyc
PYC_itertools.pyc
PYC_legacy.pyc
PYC__init__.pyc
BINjson
PYCdecoder.pyc
PYCencoder.pyc
PYCscanner.pyc
PYCtool.pyc
PYC__init__.pyc
BINlib2to3
PYCbtm_matcher.pyc
PYCbtm_utils.pyc
PYCfixer_base.pyc
PYCfixer_util.pyc
BINGrammar3.12.10.final.0.pickle
TXTGrammar.txt
PYCmain.pyc
PYCpatcomp.pyc
BINPatternGrammar3.12.10.final.0.pickle
TXTPatternGrammar.txt
PYCpygram.pyc
PYCpytree.pyc
PYCrefactor.pyc
PYC__init__.pyc
PYC__main__.pyc
BINfixes
PYCfix_apply.pyc
PYCfix_asserts.pyc
PYCfix_basestring.pyc
PYCfix_buffer.pyc
PYCfix_dict.pyc
PYCfix_except.pyc
PYCfix_exec.pyc
PYCfix_execfile.pyc
PYCfix_exitfunc.pyc
PYCfix_filter.pyc
PYCfix_funcattrs.pyc
PYCfix_future.pyc
PYCfix_getcwdu.pyc
PYCfix_has_key.pyc
PYCfix_idioms.pyc
PYCfix_import.pyc
PYCfix_imports.pyc
PYCfix_imports2.pyc
PYCfix_input.pyc
PYCfix_intern.pyc
PYCfix_isinstance.pyc
PYCfix_itertools.pyc
PYCfix_itertools_imports.pyc
PYCfix_long.pyc
PYCfix_map.pyc
PYCfix_metaclass.pyc
PYCfix_methodattrs.pyc
PYCfix_ne.pyc
PYCfix_next.pyc
PYCfix_nonzero.pyc
PYCfix_numliterals.pyc
PYCfix_operator.pyc
PYCfix_paren.pyc
PYCfix_print.pyc
PYCfix_raise.pyc
PYCfix_raw_input.pyc
PYCfix_reduce.pyc
PYCfix_reload.pyc
PYCfix_renames.pyc
PYCfix_repr.pyc
PYCfix_set_literal.pyc
PYCfix_standarderror.pyc
PYCfix_sys_exc.pyc
PYCfix_throw.pyc
PYCfix_tuple_params.pyc
PYCfix_types.pyc
PYCfix_unicode.pyc
PYCfix_urllib.pyc
PYCfix_ws_comma.pyc
PYCfix_xrange.pyc
PYCfix_xreadlines.pyc
PYCfix_zip.pyc
PYC__init__.pyc
BINpgen2
PYCconv.pyc
PYCdriver.pyc
PYCgrammar.pyc
PYCliterals.pyc
PYCparse.pyc
PYCpgen.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYC__init__.pyc
BINlogging
PYCconfig.pyc
PYChandlers.pyc
PYC__init__.pyc
BINmsilib
PYCschema.pyc
PYCsequence.pyc
PYCtext.pyc
PYC__init__.pyc
BINmultiprocessing
PYCconnection.pyc
PYCcontext.pyc
PYCforkserver.pyc
PYCheap.pyc
PYCmanagers.pyc
PYCpool.pyc
PYCpopen_fork.pyc
PYCpopen_forkserver.pyc
PYCpopen_spawn_posix.pyc
PYCpopen_spawn_win32.pyc
PYCprocess.pyc
PYCqueues.pyc
PYCreduction.pyc
PYCresource_sharer.pyc
PYCresource_tracker.pyc
PYCsharedctypes.pyc
PYCshared_memory.pyc
PYCspawn.pyc
PYCsynchronize.pyc
PYCutil.pyc
PYC__init__.pyc
BINdummy
PYCconnection.pyc
PYC__init__.pyc
BINpydoc_data
VBStopics.pyc
CSS_pydoc.css
PYC__init__.pyc
BINre
PYC_casefix.pyc
PYC_compiler.pyc
PYC_constants.pyc
PYC_parser.pyc
PYC__init__.pyc
BINsite-packages
TXTREADME.txt
BINsqlite3
PYCdbapi2.pyc
PYCdump.pyc
PYC__init__.pyc
PYC__main__.pyc
BINtomllib
PYC_parser.pyc
PYC_re.pyc
PYC_types.pyc
PYC__init__.pyc
BINunittest
PYCasync_case.pyc
PYCcase.pyc
PYCloader.pyc
PYCmain.pyc
PYCmock.pyc
PYCresult.pyc
PYCrunner.pyc
PYCsignals.pyc
PYCsuite.pyc
PYCutil.pyc
PYC_log.pyc
PYC__init__.pyc
PYC__main__.pyc
BINurllib
PYCerror.pyc
PYCparse.pyc
PYCrequest.pyc
PYCresponse.pyc
PYCrobotparser.pyc
PYC__init__.pyc
BINwsgiref
PYChandlers.pyc
PYCheaders.pyc
PYCsimple_server.pyc
PYCtypes.pyc
PYCutil.pyc
PYCvalidate.pyc
PYC__init__.pyc
BINxml
PYC__init__.pyc
BINdom
PYCdomreg.pyc
PYCexpatbuilder.pyc
PYCminicompat.pyc
PYCminidom.pyc
PYCNodeFilter.pyc
PYCpulldom.pyc
PYCxmlbuilder.pyc
PYC__init__.pyc
BINetree
PYCcElementTree.pyc
PYCElementInclude.pyc
PYCElementPath.pyc
PYCElementTree.pyc
PYC__init__.pyc
BINparsers
PYCexpat.pyc
PYC__init__.pyc
BINsax
PYCexpatreader.pyc
PYChandler.pyc
PYCsaxutils.pyc
PYCxmlreader.pyc
PYC_exceptions.pyc
PYC__init__.pyc
BINxmlrpc
PYCclient.pyc
PYCserver.pyc
PYC__init__.pyc
BINzipfile
PYC__init__.pyc
PYC__main__.pyc
BIN_path
PYCglob.pyc
PYC__init__.pyc
BINzoneinfo
PYC_common.pyc
PYC_tzpath.pyc
PYC_zoneinfo.pyc
PYC__init__.pyc
BIN__phello__
PYCspam.pyc
PYC__init__.pyc
BINham
PYCeggs.pyc
PYC__init__.pyc
EXEselect.pyd
Structure
P7B[Authenticode]_62fe92a9.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
PYCsitecustomize.pyc
DLLsqlite3.dll
Structure
P7B[Authenticode]_53277eaf.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEunicodedata.pyd
Structure
P7B[Authenticode]_b1a8163f.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
EXEwinsound.pyd
Structure
P7B[Authenticode]_0c82d295.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 10 STICH kept: 3secondary ignored: 7
bin 6img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path img:disk>arc:zip>scr:vbs~T1059.005
Shape img:disk>arc:zip>scr:vbs
technique3 nodes
Path img:disk>arc:zip>html
Shape img:disk>arc:zip>html
3 nodes
Name Value
ISO
DiskImage extraction mode: DiscUtils (ISO)
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
3 malicious · 712 files
ISO40f747b537eb469e2d106ec2e8bf4860
TXTLICENSE.txt
_PTHpython312._pth
BINlib
DATblind_engine.dat
DATcore.dat
CATpython.cat
ZIPpython312.zip
PYCabc.pyc
PYCaifc.pyc
PYCantigravity.pyc
PYCargparse.pyc
PYCast.pyc
PYCbase64.pyc
PYCbdb.pyc
PYCbisect.pyc
PYCbz2.pyc
PYCcalendar.pyc
PYCcgi.pyc
PYCcgitb.pyc
PYCchunk.pyc
PYCcmd.pyc
PYCcode.pyc
PYCcodecs.pyc
PYCcodeop.pyc
PYCcolorsys.pyc
PYCcompileall.pyc
PYCconfigparser.pyc
PYCcontextlib.pyc
PYCcontextvars.pyc
PYCcopy.pyc
PYCcopyreg.pyc
PYCcProfile.pyc
PYCcrypt.pyc
PYCcsv.pyc
PYCdataclasses.pyc
PYCdatetime.pyc
PYCdecimal.pyc
PYCdifflib.pyc
PYCdis.pyc
PYCdoctest.pyc
PYCenum.pyc
PYCfilecmp.pyc
PYCfileinput.pyc
PYCfnmatch.pyc
PYCfractions.pyc
PYCftplib.pyc
PYCfunctools.pyc
PYCgenericpath.pyc
PYCgetopt.pyc
PYCgetpass.pyc
PYCgettext.pyc
PYCglob.pyc
PYCgraphlib.pyc
PYCgzip.pyc
PYChashlib.pyc
PYCheapq.pyc
PYChmac.pyc
PYCimaplib.pyc
PYCimghdr.pyc
PYCinspect.pyc
PYCio.pyc
PYCipaddress.pyc
PYCkeyword.pyc
PYClinecache.pyc
PYClocale.pyc
PYClzma.pyc
PYCmailbox.pyc
PYCmailcap.pyc
PYCmimetypes.pyc
PYCmodulefinder.pyc
PYCnetrc.pyc
PYCnntplib.pyc
PYCntpath.pyc
PYCnturl2path.pyc
PYCnumbers.pyc
PYCopcode.pyc
PYCoperator.pyc
PYCoptparse.pyc
PYCos.pyc
PYCpathlib.pyc
PYCpdb.pyc
PYCpickle.pyc
PYCpickletools.pyc
PYCpipes.pyc
PYCpkgutil.pyc
PYCplatform.pyc
PYCplistlib.pyc
PYCpoplib.pyc
PYCposixpath.pyc
PYCpprint.pyc
PYCprofile.pyc
PYCpstats.pyc
PYCpty.pyc
PYCpyclbr.pyc
PYCpydoc.pyc
PYCpy_compile.pyc
PYCqueue.pyc
PYCquopri.pyc
PYCrandom.pyc
PYCreprlib.pyc
PYCrlcompleter.pyc
PYCrunpy.pyc
PYCsched.pyc
PYCsecrets.pyc
PYCselectors.pyc
PYCshelve.pyc
PYCshlex.pyc
PYCshutil.pyc
PYCsignal.pyc
PYCsite.pyc
PYCsmtplib.pyc
PYCsndhdr.pyc
PYCsocket.pyc
PYCsocketserver.pyc
PYCsre_compile.pyc
PYCsre_constants.pyc
PYCsre_parse.pyc
PYCssl.pyc
PYCstat.pyc
PYCstatistics.pyc
PYCstring.pyc
PYCstringprep.pyc
PYCstruct.pyc
PYCsubprocess.pyc
PYCsunau.pyc
PYCsymtable.pyc
PYCsysconfig.pyc
PYCtabnanny.pyc
PYCtarfile.pyc
PYCtelnetlib.pyc
PYCtempfile.pyc
PYCtextwrap.pyc
PYCthis.pyc
PYCthreading.pyc
PYCtimeit.pyc
PYCtoken.pyc
PYCtokenize.pyc
PYCtrace.pyc
PYCtraceback.pyc
PYCtracemalloc.pyc
PYCtty.pyc
PYCtypes.pyc
PYCtyping.pyc
PYCuu.pyc
PYCuuid.pyc
PYCwarnings.pyc
PYCwave.pyc
PYCweakref.pyc
PYCwebbrowser.pyc
PYCxdrlib.pyc
PYCzipapp.pyc
PYCzipimport.pyc
PYC_aix_support.pyc
PYC_collections_abc.pyc
PYC_compat_pickle.pyc
PYC_compression.pyc
PYC_markupbase.pyc
PYC_osx_support.pyc
PYC_pydatetime.pyc
PYC_pydecimal.pyc
PYC_pyio.pyc
PYC_pylong.pyc
PYC_py_abc.pyc
PYC_sitebuiltins.pyc
PYC_strptime.pyc
PYC_threading_local.pyc
PYC_weakrefset.pyc
PYC__future__.pyc
PYC__hello__.pyc
BINpydoc_data
VBStopics.pyc
CSS_pydoc.css
PYC__init__.pyc
PYCsitecustomize.pyc
No malware configuration was found at this point.
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
40f747b537eb469e2d106ec2e8bf4860 › lib › python312.zip › pydoc_data › topics.pyc
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
40f747b537eb469e2d106ec2e8bf4860 › lib › python312.zip › pydoc_data › topics.pyc
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙