Suspicious
Suspect

442867ed1d1e917999662c4c00d7e43b

Share on LinkedIn
Print
ZIP Archive
MD5: 442867ed1d1e917999662c4c00d7e43b
Size: 16.87 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 442867ed1d1e917999662c4c00d7e43b
Sha1 921afdd6a0fcb3c3b30c97c4fe92e9d5cb6ce660
Sha256 883febd02d7bd5e48415a019a2e09dd59f41eca0dd525cd98cf08f7d460b3ada
Sha384 a0738918fbc86c1d093f19e66a1c44fb394ede2a8b7271f9ae3f9a22f460efc38debf726617c5e3a99bb688f6fe20b76
Sha512 00d0c68f552cee213de32a220d087af3c36797efb287e6c97affdca9ce07e670543ce3561a11ede8404d859e2a062b9f5c91157d546c478cd36d89b0d60fd2fe
SSDeep 393216:SxFJtiuVvaJP6lJtF6oardIX2+nj1orLUWlmJw1fsFi1M:Sptiu8duJL6HrdEdJ+kc1M
TLSH 0D07336874668648F169827850D3DFD0ADC60E86C31A740A6C1F7C9F33DB926DFA21ED
442867ed1d1e917999662c4c00d7e43b
AccessibleMarshal.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
freebl3.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
gkcodecs.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
lgpllibs.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
libEGL.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
libGLESv2.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
mozavcodec.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
mozavutil.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
mozglue.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
mozglue.manifest
mozinference.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
mozwer.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
notificationserver.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
nss3.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
nssutil3.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
plugin-container.exe
[Authenticode]_b61b84af.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
LIMITEDACCESSFEATURE
ID:0000
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
plugin-container.exe.local
softokn3.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
wmfclearkey.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
.rsrc
.debug
.lcfg
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0002
ID:1033
xul.dll
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5
bin 5

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙