Malicious
5f20e45252e2843506ff0cde903fa363
ZIP Archive
MD5: 5f20e45252e2843506ff0cde903fa363
Size: 12.67 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 5f20e45252e2843506ff0cde903fa363 |
| Sha1 | e988ca8afd243496d05d78d3843912bf60e7e6fd |
| Sha256 | 1ed821fcc96cd12b94a7d4ab486d718416164e0ef8b607821b02b34c38f02674 |
| Sha384 | 1963b4106aa38c07c4e71fd0bf1a1cb49ee91c9393cbdba3d4ef5592909d80303a252f6415db2f3f9a44cf7e85ebb084 |
| Sha512 | c764c5aa16b0f72b124388a9e13a84c47ca3d9c0788722ce4e384edb10dc2c312fb20b539ab611a1b2fbd50bef25aa43109a93cbbe8b56d8a56c432b418f3905 |
| SSDeep | 196608:hYIN/WRt9fPdN5v/CiN+pNGrDYOxlu2qy8fmaKFOuXuLBZ4/u02LnXeOOmhhlI9s:h//QvfPdDSN7GrD6Rl2kZLr9EFemw/ |
| TLSH | 49D633C4B5709AEE37C6A7413FE529E9F2A001613DD581C3A690350AD63BADFCEDE016 |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 9
STICH kept: 2secondary ignored: 7
bin
6img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd
Shape
arc:zip>lnk>lnk:cmd
malicious
3 nodes
Path
arc:zip>arc:zip>pe:exe
Shape
arc:zip>arc:zip>pe:exe
3 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| CreationDate | D:20260623123536-07'00' |
| Creator | Adobe Acrobat 22.1 |
| ModifiedDate | D:20260623123555-07'00' |
| Producer | Adobe Acrobat 22.1 Image Conversion Plug-in |
| /CreationDate | D:20260623123536-07'00' |
| /Creator | Adobe Acrobat 22.1 |
| /ModDate | D:20260623123555-07'00' |
| /Producer | Adobe Acrobat 22.1 Image Conversion Plug-in |
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
No malware configuration was found at this point.
LNK: Command Execution
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
5f20e45252e2843506ff0cde903fa363 › ISKH_7565_Naznachenie_doshnost.pdf.lnk
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.