Malicious
ZIP Archive
MD5: 738f2a027ca3b897e146a92b6d89def9
Size: 487.15 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
487.15 KB · 487,153 B
First seen
2026-10-06 08:16 · 19 days ago
Last seen
2026-10-06 08:16 · 19 days ago
Last analysis
2026-10-06 08:17 · 19 days ago
Hashes
MD5
738f2a027ca3b897e146a92b6d89def9
Sha1
383f3e999f50f8b81305aad8e036a8a5ddb28b93
Sha256
216728d34701ec5517a2ad4bb9bc08bd903bae9ab86181577564a0bd9b11998c
Sha384
eb194f6c619f37c316d6c5d4671befff438b46ccda7e75415088219566d72d81d86746a63cd1af58a85b50db43fd12a5
Sha512
69667f5441baea5ab775bff5948c818d1adf441f137a93582885e890d3f9bfe98e9079202548d946754799630f74f1229478f428d128b6d70cd1401cf7e5bc14
SSDeep
12288:Er06JUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZp:Er06JUv4t1cNk/wjibhv4b2Onv
TLSH
2BA4238274716D06D096CFBDD4C1AACAD0AA023D35263BE5639294CABD940367F9BF13
2 malicious · 5 files
ZIP738f2a027ca3b897e146a92b6d89def9T1027 · T1059.005
CMDApplication.cmd
VBScert.txtT1027 · T1059.005
VBScert.txt.deobfuscated.vbsT1059.005
EXEutil.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:vbs~T1027~T1059.005
Shape
arc:zip>scr:vbs
technique2 nodes
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
2 nodes