Malicious
Malicious

5afde53a33a853c83b6b1cf3fa9a8690

Share on LinkedIn
Print
ZIP Archive
MD5: 5afde53a33a853c83b6b1cf3fa9a8690
Size: 6.41 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
6.41 MB · 6,409,573 B
First seen
2026-07-27 13:16 · 3 months ago
Last seen
2026-07-27 13:16 · 3 months ago
Last analysis
2026-07-27 13:17 · 3 months ago
Hashes
MD5 5afde53a33a853c83b6b1cf3fa9a8690 Sha1 d067a94396be4acb3244773bbb440e4e6bf15d8a Sha256 757beb610410f58fb83577fba8dc8721d1d17bff5173d9b6a00bbe4a2092ca1a Sha384 2ad3bff79b47226ab954855e81d43bb397e5c65acc9f18234bfaefd451a672ea333be5436b2bb03689dc61f27390fbf2 Sha512 c13b59967d0052198ca0aabc8f4fcc77349fc301c69457df82aec9f42167352e4122a2680d75ddb81664c8e29bd4d9343bfd5276c4abb2b8e3531ee7467ae204 SSDeep 196608:1N5FAcc5JUlXz9xwMVWOGrvlFt0WzGKws:H5FAfUds3LLTGNs TLSH 69563391CC30A3DDDE4DAE74927EF2684259BC164C8F23363444B69AD4F7D879A02A3D
2 malicious · 127 files
ZIP5afde53a33a853c83b6b1cf3fa9a8690CVE-2019-9674
BINAmongUsModMenu
BINAmongUsModMenu
BINmodules
BINthumbnails_lib
MDAdvanced.md
DATbrowse_cache_dat.dat
BMPcard-edition.bmp
BMPframe.bmp
TXTPresetGuide.txt
JSONpreset_data.json
JSONSEASON_META.json
BMPsplash-mission.bmp
BMPsplash_433.bmp
JSONtheme_info_2025.json
BMPtile_card.bmp
JSONtrophy-list-banner.json
DATTrophyDataDat.dat
BMPWallpaper.bmp
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
5 / 5
Path arc:zip>pe:dll>pe:rsrc>bin
Shape arc:zip>pe:dll>pe:rsrc>bin
malicious 4 nodes
Path arc:zip>pe:exe>pe:rsrc>bin
Shape arc:zip>pe:exe>pe:rsrc>bin
malicious 4 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙