Suspicious
Suspect

645a535dc97ee48d5064985c4b3cd151

ZIP Archive
MD5: 645a535dc97ee48d5064985c4b3cd151
Size: 584.58 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 645a535dc97ee48d5064985c4b3cd151
Sha1 da5ea534b827806df89ed8a57a8ff59a46c15035
Sha256 2b7420f0b08b137fa3fd48fbce4bfc046ff47788cb5ba09fc91830ef9f62ca4a
Sha384 c5c8a493fa4a33cd234d8046cfa9ca52f527d8395121c5104f320910320e2c79461013224fd3b4d48b54598712555414
Sha512 b86f02689b9dd1ca940fef9056c6face209d1d6ade2f0f82ddaa7e83d20f9a83b95397c04854a99e9a90cd5658dfe28cd293d2f29b453f505beb407e796b8a52
SSDeep 12288:uA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWGSFyorOIic/7MPL:hm6Jj6ESfUxZ91kmY/99z8XFXicTI
TLSH 76C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB2218F
Activate.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
package.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Activate.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
package.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙