Suspicious
Suspect

4c29ebf69a89b9fa27ddf71b72cca280

ZIP Archive
MD5: 4c29ebf69a89b9fa27ddf71b72cca280
Size: 236.35 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4c29ebf69a89b9fa27ddf71b72cca280
Sha1 72e2ad1acdddbb16888ebdba5dfed440da261bb5
Sha256 aff385e48471ae461ee8e0b27e31bd41c90c99b4d2c9100eaacfdeea234da1a6
Sha384 94ea07cf44e05a505960bf3ca124fc243ad9766e87f3bf0a15a7da480b00ed1d89ba87c9ce611f4efa95d78e104c7e66
Sha512 322f55f4083936f13cb48d0c81d8cb2aadbb2b6ccee6e20e633c44ae7547d4865706d1a69584ee24e25979bf7410e5f98759446360eaaeda20e648c4729016b7
SSDeep 6144:ZZYystSnCqRvZTTJ+gUgyf40S6y311EETfJYDQkDD:ZZ8t2XRL+9FSrrBkP
TLSH 7A3423EE28F472F9BC35BDE2750A392489CD575361725F42105A3BAB0B48DA6C47F882
AVKTray.dat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.buildid
.data
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
AVKTray.dat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.buildid
.data
.tls
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙