Malicious
ZIP Archive
MD5: 4293df021391096798350408310c5787
Size: 31.47 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
31.47 KB · 31,474 B
First seen
2026-09-06 23:00 · one month ago
Last seen
2026-09-06 23:00 · one month ago
Last analysis
2026-09-06 23:00 · one month ago
Hashes
MD5
4293df021391096798350408310c5787
Sha1
144d9363edbd6e354d14ed17ef2f04b60aa6f23a
Sha256
d53bfb43671e23ef1f925166938a2f4fb28ad163f88e92a26505aa2d56cf8977
Sha384
1ce44593fb4b34944ce938e7327560d26052191b3814a385294b06f7790d6a0bcf9df3fe16f40032f6b2dfc25c38ffce
Sha512
f96dadb4653d62a6e8c8d09617e83880a0df523a13d7e7ccbfb081e918e9c3598151d31b3c3531321783635303a3cd8c6225d135aa173f00cd9934d99ecbc16f
SSDeep
768:J4bfo5SafnBsbLufB8f0G+CLD+R5CAOs6E2jZycASFcwfc/:J95SequfB8fICyZ2jAcAoc/
TLSH
04E2F1AFD70A872BA2F2917CC061335D332F248ED2F725016A284787B8C655F656CDC9
2 malicious · 10 files
ZIP4293df021391096798350408310c5787XWorm
EXEWeekly Report 1150902-1-pdf.exeXWorm
Structure
BINResources
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>pe:exe>pe:rsrc>bin
Shape
arc:zip>pe:exe>pe:rsrc>bin
malicious
4 nodes
| Config. Field | Value |
|---|---|
| Mutex | QzPk8huhuhuhuhuhuhu |
| Hosts | 74.1huhuhuhuhuhuhu |
| Port | 7huhuhuhu |
| KEY | Mashuhuhuhu |
| USBNM | <Xwhuhuhuhu |
| family | xhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialMutex
MUTEXmalicious
QzPk8huhuhuhuhuhuhu
CnC
CNCmalicious
74.1huhuhuhuhuhuhu
Port
PORTmalicious
7huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential