Malicious
Malicious

5afde53a33a853c83b6b1cf3fa9a8690

Share on LinkedIn
Print
ZIP Archive
MD5: 5afde53a33a853c83b6b1cf3fa9a8690
Size: 6.41 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5afde53a33a853c83b6b1cf3fa9a8690
Sha1 d067a94396be4acb3244773bbb440e4e6bf15d8a
Sha256 757beb610410f58fb83577fba8dc8721d1d17bff5173d9b6a00bbe4a2092ca1a
Sha384 2ad3bff79b47226ab954855e81d43bb397e5c65acc9f18234bfaefd451a672ea333be5436b2bb03689dc61f27390fbf2
Sha512 c13b59967d0052198ca0aabc8f4fcc77349fc301c69457df82aec9f42167352e4122a2680d75ddb81664c8e29bd4d9343bfd5276c4abb2b8e3531ee7467ae204
SSDeep 196608:1N5FAcc5JUlXz9xwMVWOGrvlFt0WzGKws:H5FAfUds3LLTGNs
TLSH 69563391CC30A3DDDE4DAE74927EF2684259BC164C8F23363444B69AD4F7D879A02A3D
5afde53a33a853c83b6b1cf3fa9a8690
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu
Malicious
AmongUsModMenu.exe
[Authenticode]_a6ba28f6.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
.debug
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
libiconv-2.dll
[Authenticode]_9e5aa671.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libintl-8.dll
[Authenticode]_07bf70b0.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
libpcre2-8-0.dll
[Authenticode]_01b11a87.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.tls
.reloc
libwinpthread-1.dll
Overlay_45614783.bin
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
locale_data
cs
alert_messages.json
hint_lines.json
panel_strings.json
popup_text.json
da
feedback_lines.json
labels_ui.json
menu_entries.json
popup_text.json
el
alert_messages.json
captions.json
feedback_lines.json
menu_entries.json
popup_text.json
en
feedback_lines.json
panel_strings.json
popup_text.json
es
alert_messages.json
feedback_lines.json
labels_ui.json
fi
alert_messages.json
feedback_lines.json
popup_text.json
fr
hint_lines.json
menu_entries.json
panel_strings.json
it
alert_messages.json
labels_ui.json
menu_entries.json
panel_strings.json
ja
alert_messages.json
captions.json
hint_lines.json
labels_ui.json
panel_strings.json
ko
alert_messages.json
captions.json
panel_strings.json
pl
alert_messages.json
feedback_lines.json
labels_ui.json
pt
alert_messages.json
feedback_lines.json
hint_lines.json
labels_ui.json
sv
feedback_lines.json
hint_lines.json
panel_strings.json
modules
Malicious
assets
feedback_table.csv
LauncherState.json
loadout_defaults_2025.ini
THEME_SETTINGS.ini
manuals
browser_config_v8.ini
guide.txt
manifest_blob_513.dat
README_v9.md
season_meta_library.json
user_options.json
patches
AUDIO_OPTIONS.ini
CONFIG.json
launcher_settings.ini
library_options_active.ini
pack_blob.dat
pack_outline.xml
preset_defaults.ini
preset_index.csv
rating_data_dat_2023.dat
thumbnail_render_enabled.log
troubleshooting_notes.txt
presets
background_task_v9.log
config-panel.json
FEEDBACK_TABLE.csv
FlintFoundry
changelog_xml.xml
LICENSE_NOTES.txt
manifest.json
pack_outline_queued.xml
wallpaper-kit.bmp
manifest_blob_v8.dat
manual-builder.txt
pearl-works
launcher_state.json
LICENSE_NOTES.txt
manifest.json
README.md
thumbnail_cache_dat.dat
PRESET_APPLY.log
thumbnails_lib
Malicious
Advanced.md
browse_cache_dat.dat
card-edition.bmp
frame.bmp
PresetGuide.txt
preset_data.json
SEASON_META.json
splash-mission.bmp
splash_433.bmp
theme_info_2025.json
tile_card.bmp
Malicious
trophy-list-banner.json
TrophyDataDat.dat
Wallpaper.bmp
msvcp140.dll
[Authenticode]_c434e7f7.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
ucrtbase.dll
[Authenticode]_c7070076.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140.dll
[Authenticode]_add9f1e3.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
_RDATA
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
vcruntime140_1.dll
[Authenticode]_2441bb51.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
zlib1.dll
[Authenticode]_753a1aed.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
5 / 5
Path arc:zip>pe:dll>pe:rsrc>bin
Shape arc:zip>pe:dll>pe:rsrc>bin
malicious 4 nodes
Path arc:zip>pe:exe>pe:rsrc>bin
Shape arc:zip>pe:exe>pe:rsrc>bin
malicious 4 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙