Malicious
413da167913cc18654f066f178d65c7d
ZIP Archive
MD5: 413da167913cc18654f066f178d65c7d
Size: 3.43 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 413da167913cc18654f066f178d65c7d |
| Sha1 | 58b12b750ace145bdd45b7fb359e7be779bccef0 |
| Sha256 | f3171ee172b751eadab38b37cf0a3e465f7085590dfbf0fae88008611d261e57 |
| Sha384 | f4e138053f31521d5fbaceecb624133510992b7c875c95cd5777d17d54c5c3fd26d4688e87d08bd877df5b9d5747aa12 |
| Sha512 | 0e1448211d122281d1fd2cb8990ad377f51e53100cbf155adb0061f87aaa05f1a85bf5d348a40b774a55d448ae85bbf285705cc8ed1eff33de0ab81595fbaf59 |
| SSDeep | 48:9z0qjopddoeQlvzPumk+iG19Mc50s9fIX4vMOm/fv5yuIWxtdv9B5IV7FCB:voharPumF3P9mvQcxtfB5sFm |
| TLSH | 50617C47CA147746CDDD8DFC2A1C999B22C46CEB8226534D48A56083F9A83413EEC08A |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
"try {huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
"try {huhuhuhuhuhuhuhuhuhuhu
413da167913cc18654f066f178d65c7d › social_security_benefit_statement_28032.cmd › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.