5afde53a33a853c83b6b1cf3fa9a8690

ZIP Archive

MD5: 5afde53a33a853c83b6b1cf3fa9a8690

Size: 6.41 MB

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

ZIP archive

Size

6.41 MB · 6,409,573 B

First seen

2026-07-27 13:16 · 3 months ago

Last seen

2026-07-27 13:16 · 3 months ago

Last analysis

2026-07-27 13:17 · 3 months ago

Hashes

MD5 5afde53a33a853c83b6b1cf3fa9a8690 Sha1 d067a94396be4acb3244773bbb440e4e6bf15d8a Sha256 757beb610410f58fb83577fba8dc8721d1d17bff5173d9b6a00bbe4a2092ca1a Sha384 2ad3bff79b47226ab954855e81d43bb397e5c65acc9f18234bfaefd451a672ea333be5436b2bb03689dc61f27390fbf2 Sha512 c13b59967d0052198ca0aabc8f4fcc77349fc301c69457df82aec9f42167352e4122a2680d75ddb81664c8e29bd4d9343bfd5276c4abb2b8e3531ee7467ae204 SSDeep 196608:1N5FAcc5JUlXz9xwMVWOGrvlFt0WzGKws:H5FAfUds3LLTGNs TLSH 69563391CC30A3DDDE4DAE74927EF2684259BC164C8F23363444B69AD4F7D879A02A3D

2 malicious · 127 files

ZIP5afde53a33a853c83b6b1cf3fa9a8690CVE-2019-9674

BINAmongUsModMenu

EXEAmongUsModMenu.exe

Structure

P7B[Authenticode]_a6ba28f6.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

BINRT_MANIFEST

BINID:0001

BINID:1033

DLLlibiconv-2.dll

Structure

P7B[Authenticode]_9e5aa671.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLlibintl-8.dll

Structure

P7B[Authenticode]_07bf70b0.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLlibpcre2-8-0.dll

Structure

P7B[Authenticode]_01b11a87.p7b

DLLlibwinpthread-1.dll

Structure

BINOverlay_45614783.bin

BINlocale_data

BINcs

JSONalert_messages.json

JSONhint_lines.json

JSONpanel_strings.json

JSONpopup_text.json

BINda

JSONfeedback_lines.json

JSONlabels_ui.json

JSONmenu_entries.json

JSONpopup_text.json

BINel

JSONalert_messages.json

JSONcaptions.json

JSONfeedback_lines.json

JSONmenu_entries.json

JSONpopup_text.json

BINen

JSONfeedback_lines.json

JSONpanel_strings.json

JSONpopup_text.json

BINes

JSONalert_messages.json

JSONfeedback_lines.json

JSONlabels_ui.json

BINfi

JSONalert_messages.json

JSONfeedback_lines.json

JSONpopup_text.json

BINfr

JSONhint_lines.json

JSONmenu_entries.json

JSONpanel_strings.json

BINit

JSONalert_messages.json

JSONlabels_ui.json

JSONmenu_entries.json

JSONpanel_strings.json

BINja

JSONalert_messages.json

JSONcaptions.json

JSONhint_lines.json

JSONlabels_ui.json

JSONpanel_strings.json

BINko

JSONalert_messages.json

JSONcaptions.json

JSONpanel_strings.json

BINpl

JSONalert_messages.json

JSONfeedback_lines.json

JSONlabels_ui.json

BINpt

JSONalert_messages.json

JSONfeedback_lines.json

JSONhint_lines.json

JSONlabels_ui.json

BINsv

JSONfeedback_lines.json

JSONhint_lines.json

JSONpanel_strings.json

BINmodules

BINassets

CSVfeedback_table.csv

JSONLauncherState.json

INIloadout_defaults_2025.ini

INITHEME_SETTINGS.ini

BINmanuals

INIbrowser_config_v8.ini

TXTguide.txt

DATmanifest_blob_513.dat

MDREADME_v9.md

JSONseason_meta_library.json

JSONuser_options.json

BINpatches

INIAUDIO_OPTIONS.ini

JSONCONFIG.json

INIlauncher_settings.ini

INIlibrary_options_active.ini

DATpack_blob.dat

XMLpack_outline.xml

INIpreset_defaults.ini

CSVpreset_index.csv

DATrating_data_dat_2023.dat

LOGthumbnail_render_enabled.log

TXTtroubleshooting_notes.txt

BINpresets

LOGbackground_task_v9.log

JSONconfig-panel.json

CSVFEEDBACK_TABLE.csv

BINFlintFoundry

XMLchangelog_xml.xml

TXTLICENSE_NOTES.txt

JSONmanifest.json

XMLpack_outline_queued.xml

BMPwallpaper-kit.bmp

DATmanifest_blob_v8.dat

TXTmanual-builder.txt

BINpearl-works

JSONlauncher_state.json

TXTLICENSE_NOTES.txt

JSONmanifest.json

MDREADME.md

DATthumbnail_cache_dat.dat

LOGPRESET_APPLY.log

BINthumbnails_lib

MDAdvanced.md

DATbrowse_cache_dat.dat

BMPcard-edition.bmp

BMPframe.bmp

TXTPresetGuide.txt

JSONpreset_data.json

JSONSEASON_META.json

BMPsplash-mission.bmp

BMPsplash_433.bmp

JSONtheme_info_2025.json

BMPtile_card.bmp

JSONtrophy-list-banner.json

DATTrophyDataDat.dat

BMPWallpaper.bmp

DLLmsvcp140.dll

Structure

P7B[Authenticode]_c434e7f7.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLucrtbase.dll

Structure

P7B[Authenticode]_c7070076.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLvcruntime140.dll

Structure

P7B[Authenticode]_add9f1e3.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLvcruntime140_1.dll

Structure

P7B[Authenticode]_2441bb51.p7b

BINResources

BINRT_VERSION

BINID:0001

BINID:1033

DLLzlib1.dll

Structure

P7B[Authenticode]_753a1aed.p7b

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

5 / 5

Path arc:zip>pe:dll>pe:rsrc>bin

Shape arc:zip>pe:dll>pe:rsrc>bin

malicious 4 nodes

Path arc:zip>pe:exe>pe:rsrc>bin

Shape arc:zip>pe:exe>pe:rsrc>bin

malicious 4 nodes

2 malicious · 127 files

ZIP5afde53a33a853c83b6b1cf3fa9a8690CVE-2019-9674

BINAmongUsModMenu

EXEAmongUsModMenu.exe

DLLlibiconv-2.dll

DLLlibintl-8.dll

DLLlibpcre2-8-0.dll

DLLlibwinpthread-1.dll

BINlocale_data

BINmodules

BINassets

BINmanuals

BINpatches

BINpresets

BINthumbnails_lib

MDAdvanced.md

DATbrowse_cache_dat.dat

BMPcard-edition.bmp

BMPframe.bmp

TXTPresetGuide.txt

JSONpreset_data.json

JSONSEASON_META.json

BMPsplash-mission.bmp

BMPsplash_433.bmp

JSONtheme_info_2025.json

BMPtile_card.bmp

JSONtrophy-list-banner.json

DATTrophyDataDat.dat

BMPWallpaper.bmp

DLLmsvcp140.dll

DLLucrtbase.dll

DLLvcruntime140.dll

DLLvcruntime140_1.dll

DLLzlib1.dll

No malware configuration was found at this point.