Suspect
GZIP Archive
MD5: 489f834f5f6ed0e120828bebf397c811
Size: 3.25 MB
application/gzip
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
GZIP archive
Size
3.25 MB · 3,245,415 B
First seen
2026-07-26 14:16 · 3 months ago
Last seen
2026-07-26 14:16 · 3 months ago
Last analysis
2026-07-26 15:31 · 3 months ago
Hashes
MD5
489f834f5f6ed0e120828bebf397c811
Sha1
e4c2ac1a60b8079da005dda025304749ebaf7217
Sha256
2b96e1fefa7210da37cebff57e10c76139f6953f908c819296a48ddf5eada707
Sha384
17705e9612fa1831adc5457380af8f27687d5aaeb4e50244d76bea13444f391dfc9abf1a2a1e7576db678e5dd94f9a3e
Sha512
a978121922911f81da2176aa66775ab9f5341bd6f43f2a9502c7962f21f91fc2cfa86b3105bd88dcd526cda1636b4281b95b3f57164b2fb98f589b14f7dd0ee8
SSDeep
98304:p46bISNpJ877CnosVBVibRTZQiVhF/wAEs7:p46bISt8vCntVoR1Quz/wAEs7
TLSH
7CE5332545B32C7F16BFF7D4BAB1AD41A9D0562C5CB248373B79B14E08B2BE30C69246
16 files
GZ489f834f5f6ed0e120828bebf397c811
TARfile_0.bin
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:gz>arc:tar>elf
Shape
arc:gz>arc:tar>elf
3 nodes