Malicious
Tar Archive
MD5: 561b4d321e756c05752571b54bce8a65
Size: 291.33 KB
application/x-tar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 561b4d321e756c05752571b54bce8a65 |
| Sha1 | d9f554eb2d81ab6293235c42e19d4113f91b7725 |
| Sha256 | 4fc548d4267d30acd658a3a43e30b4924dade9371cf6448cb1ae9e374f7dd69a |
| Sha384 | e693c36f4de8fb34cffa398cc62af1fc0b7d41d4ad035d21332b4ec165add99ef85a94bb6c184e4a8c50da40016d88a7 |
| Sha512 | 62942f25f0eb8f3b239852641d7c59e0bcb648d2ab842888860f7b033a8d28ba2d9044ab508693f0d1dcb3383d074ae745059314c9e4af21b42b9ebc12f74d2e |
| SSDeep | 6144:oNJX3NAbLf8KTloA8rEQ4FLyj2Un161ajwC+57v5:oN28KlFLM16 |
| TLSH | E2542B71B0C4589DE8C9C97C44E9760A0B3D7D1F8AE928AB371CEE25A7043C1BF15A67 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
4img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:tar>lnk~T1059.003~T1202~T1204.002
Shape
arc:tar>lnk
malicious
2 nodes
Path
arc:tar>pdf
Shape
arc:tar>pdf
2 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| Author | Анна Устинова |
| CreationDate | D:20260727074647Z' |
| Creator | Calc |
| Producer | LibreOffice 25.2.3.2 (X86_64) / LibreOffice Community |
| /CreationDate | D:20260727074647Z' |
| Version | 1.7 |
| Author | Анна Устинова |
| CreationDate | D:20260727074647Z' |
| Creator | Calc |
| Producer | LibreOffice 25.2.3.2 (X86_64) / LibreOffice Community |
| /CreationDate | D:20260727074647Z' |
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential