Malicious
ZIP Archive
MD5: 4f76adbf0d6dbfa223a96e40aa7375fb
Size: 11.23 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 4f76adbf0d6dbfa223a96e40aa7375fb |
| Sha1 | 528038d6c259a5e6d5f64fdb497ec905fb28ba68 |
| Sha256 | 8d65192fabdefc204ea73e9c19b22c81af46c9b3946cc2ff4df40d18516f97e2 |
| Sha384 | 9ecb33a433c98726448866c3e6a1bdf1f09591aa48d51221a33e5810c30c9fb5bb8ff497174f4cfe9437a4c8571c02b4 |
| Sha512 | d7167c0231320fec5f506526f35a85e3c697df39abbcea3b1e7f133e72caefdf4e6bda2bc1b2606888fdf647b0f3351ffd67fe87af7e0cbd1d335272edcc1a92 |
| SSDeep | 196608:xoslj+RxnaqYfoYhvhVo6PfrlPW2zvT6VpsaurXkJWcaiJ5uQdQnBhv:xflinDUh7o67QaT6vslTkJWlQdQnBB |
| TLSH | E2B633ECCA403CCDE8C7BA3D8BE819EAE9D58A378A10D5E6D145A3E0247E1FD2C51457 |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 12
STICH kept: 4secondary ignored: 8
bin
7img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>arc:zip>arc:zip>scr:vbs~T1059.005
Shape
arc:zip>arc:zip>arc:zip>scr:vbs
technique4 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
@echo
huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential