Malicious
Malicious

43da1db6af1fe3bfbd61ad4b0c3da019

Rar Archive
MD5: 43da1db6af1fe3bfbd61ad4b0c3da019
Size: 1.09 MB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 43da1db6af1fe3bfbd61ad4b0c3da019
Sha1 c4ab6ccb33035933953c808177ae18fd842314cb
Sha256 24e5d2dd603fd47fed2a2ba1426244d5d357907cb049ab69d3db2a7dc787784b
Sha384 35b7879e977f4bea9b71b934baf18b99a835c6ec1e11e5f4f8c9084f527131c79e3afd9239c9b84fb98dc87c777d16db
Sha512 0a0379283e79c212582be728145bb9e963896b09166623711af3b39a015146fa7700ae6d14eafb3f6e95309598b09eb2103e48d50d81dae04bff4505903f1850
SSDeep 24576:Sx6z5ysb6bERS57bfB2EBqwHLsUwfCxbxCJbm5Vx6vR7HgxA1jdHQ8OOxCP:Sx6FhRS57bf7nJkCxbi+Vg9gMjdPO5
TLSH A53533FDB56626CA2F74FD3F432A3114C5240073B7299706586E63774EEAC6A40F983A
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
cV.AY.resources
$this.Icon
[NBF]root.IconData
emz.Vmx.resources
NJ
[NBF]root.Data
DyI.wyV.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
QQC.Properties.Resources.resources
h17 (5)
[NBF]root.Data
[NBF]root.Data-preview.png
h17 (4)
[NBF]root.Data
[NBF]root.Data-preview.png
a4
[NBF]root.Data
[NBF]root.Data-preview.png
h21
[NBF]root.Data
[NBF]root.Data-preview.png
a9 (7)
[NBF]root.Data
[NBF]root.Data.exif
[NBF]root.Data-preview.png
a9 (2)
[NBF]root.Data
[NBF]root.Data.exif
[NBF]root.Data-preview.png
xCie
[NBF]root.Data
[NBF]root.Data-preview.png
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
5 / 5
Path arc:rar>pe:exe>img>img
Shape arc:rar>pe:exe>img>img
malicious 4 nodes
Path arc:rar>pe:exe>pe:rsrc>img
Shape arc:rar>pe:exe>pe:rsrc>img
malicious 4 nodes
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:7F00
ID:0
RT_VERSION
ID:0001
ID:0
.Net Resources
cV.AY.resources
$this.Icon
[NBF]root.IconData
emz.Vmx.resources
NJ
[NBF]root.Data
DyI.wyV.resources
aR3nbf8dQp2feLmk31.lSfgApatkdxsVcGcrktoFd.resources
$this.Icon
[NBF]root.IconData
progressBar1.Modifiers
$this.Language
$this.GridSize
QQC.Properties.Resources.resources
h17 (5)
[NBF]root.Data
[NBF]root.Data-preview.png
h17 (4)
[NBF]root.Data
[NBF]root.Data-preview.png
a4
[NBF]root.Data
[NBF]root.Data-preview.png
h21
[NBF]root.Data
[NBF]root.Data-preview.png
a9 (7)
[NBF]root.Data
[NBF]root.Data.exif
[NBF]root.Data-preview.png
a9 (2)
[NBF]root.Data
[NBF]root.Data.exif
[NBF]root.Data-preview.png
xCie
[NBF]root.Data
[NBF]root.Data-preview.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙