Malicious
ZIP Archive
MD5: 4975538c030469b6170ec110d1dec542
Size: 16.21 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
16.21 MB · 16,205,598 B
First seen
2026-10-07 03:15 · 18 days ago
Last seen
2026-10-07 03:15 · 18 days ago
Last analysis
2026-10-07 03:21 · 18 days ago
Hashes
MD5
4975538c030469b6170ec110d1dec542
Sha1
2bfd2d25f44050b8a089f1a83e676df96cd92f6a
Sha256
d0fae14af3bda82a509889852346f4797e6232e03a29f2f7142e574f6aca127e
Sha384
29d0dc30b4b52817dfe84d0e8e89b092506cd477ac817c0224a03b6ef936f4e3e9affd0d07b325ea574a4bbe29481ac2
Sha512
e966cf4a9809b6ce83f37e5ef5166b7f67b86659bdf6465bb68afadd3eb67c963e6411da384236424207a13ab79eaef207c3c70788a1392009ddb7d2d7c44c05
SSDeep
393216:cxDm6jkMy/7cLV6u0iw7oOSK6WQCXY0iw7oOSK6WQSyRpIy7+Ayo3SySFk8Ra:KDYDmwu05oOSUQb05oOSUQS8H7+Ayo3f
TLSH
B1F62325F4453671F88EC6B405B02DA403E4AD76236F0BC82239B45F9663E7D9F78A36
2 malicious · 3952 files
ZIP4975538c030469b6170ec110d1dec542T1059.007CVE-2019-9674
BINbin
BINico
BINmessages
DLLpython37.dll
Structure
BINOverlay_c26d7eed.bin
BINResources
DLLQtScript4.dll
EXESetup.exe
DLLvcruntime140.dll
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
15 / 15
Path
arc:zip>pe:dll>pe:rsrc>pe:exe>pe:rsrc>bin
Shape
arc:zip>pe:dll>pe:rsrc>pe:exe>pe:rsrc>bin
malicious
6 nodes
Path
arc:zip>pe:exe>pe:rsrc>pe:exe>pe:rsrc>bin
Shape
arc:zip>pe:exe>pe:rsrc>pe:exe>pe:rsrc>bin
malicious
6 nodes