Suspicious
Suspect

4ed5b394eb6974121bff65f0a8e3e31c

ZIP Archive
MD5: 4ed5b394eb6974121bff65f0a8e3e31c
Size: 584.48 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4ed5b394eb6974121bff65f0a8e3e31c
Sha1 50edfb2fb2a1c920074f993f89347eb3586929a6
Sha256 2ced64206af37465119319d1de1d97e85fb8961901764fff8bb3be8fb2b8b32e
Sha384 398a026bd69b3e7a106f5a9f7150ff42bd6a464ce65cfd3a2e2cb79fa638eb93176851c2fe1f66195523fa423e7ce8eb
Sha512 809c2c609e810c2cc056c80a44e7a6ba19235af121d95e52da887b99eee88cab87d21970c18d3a17ed0a33c2db3c1ba404f062a77d43a5be19e6b8665ef37f43
SSDeep 12288:D6wlOMWROC/FTeHo22Qm7NzofOr68mGeA924EwCM:74MQOC/gHozN7NzomW88A9X
TLSH 4AC42304340641D5835A2B1EAEC4E6E0BEB570DBFA1CF940AADD7ED06DE92A177C1837
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙