Suspicious
Suspect

79953f3cb8c06e922a8cf79c0ffa3e70

ZIP Archive
MD5: 79953f3cb8c06e922a8cf79c0ffa3e70
Size: 542.16 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 79953f3cb8c06e922a8cf79c0ffa3e70
Sha1 06011470ebe61716af625858acb1bc12a7f6c838
Sha256 16ba060f71d503f4ff1a1aff26c9dcf067a04249db394a4eb3a1ba1ca1d74f0c
Sha384 415192eadbe57ba1fd84b874ec853491f108163c043c43bdaf9a194004d780762a34ba437221d0e9cc811de580c9aca3
Sha512 c9f729f62058fd4f8697e4e95196137f93126bb45b3c7f3aa80bdb034b5c91033b470029a8ecc6a07942d1ad1630cc08a0ded50875dac5346d40f5f6a3e81258
SSDeep 12288:17JZAaFpeOqO3g/ALyYG0ZaDajTCXMO8xzDOe3We:pLpeEA/f0Za6TCXKBxme
TLSH 6EB42369227F71900C7543A84B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB195638E0E
bytecode.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Launcher.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
bytecode.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Launcher.cmd
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙