Suspicious
Suspect

848ec6f02d0a9f1c1d40c3d80d21d217

ZIP Archive
MD5: 848ec6f02d0a9f1c1d40c3d80d21d217
Size: 525.57 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 848ec6f02d0a9f1c1d40c3d80d21d217
Sha1 3fd8b24dd54122fbeb2615c7b11ebf037997b305
Sha256 adcdb7b809b5e45ced6637ddafb646b5aa7ec4d5799e8927e889757d812f4413
Sha384 15099304cebd55919d69d854543fd30f59239ab06e2637f8cdaa76b31d031b482fead47c1fe465dcdd693596edb8d7b2
Sha512 d28e55b9075b75170cbd58c4ff432b150dd3e39eec72bb573b2b742c06b02c1b759ca110f0df2b941174b90dbc4298b1fd80c62907ec1b2944833d767a17039c
SSDeep 12288:1TibgSMFBOBSlqrxKu7FxPbzJTVBU+8JM9hAC8Z3QVOBRkbKQDiUbpKM:scSMFYHKkxpTKJM9mCw3QVOMWAPbpL
TLSH 8EB4231AF4D478CFD68ACDA394291C785F6C96C9CD122B7246C4EE9313442F627A44FE
LaunchTool.cmd
lib_bit.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
LaunchTool.cmd
lib_bit.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙