Suspect
8c5498aff007b3276210446e376fbdae
ZIP Archive
MD5: 8c5498aff007b3276210446e376fbdae
Size: 2.5 MB
application/zip
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
ZIP archive
Size
2.5 MB · 2,495,790 B
Hashes
MD5
8c5498aff007b3276210446e376fbdae
Sha1
9d69b984df536581819e69ae66a27abe894c0a9a
Sha256
7e2ad0ec1f150f9dd7b933d817eeadd7ef42219f1bbd8f26d722dc5ee4e8260f
Sha384
38455cd7e198f69ff920fa08b06f20dd5406290498797786d42a50341b9f63883c38ea4d2eed25c0d069215bf19fdef8
Sha512
40c952ac0151506f0c8accac80f7da05c913045d20a5c5518b0744129715a4e38f5b74700432b3f926bce2a83d587739cd6f1e597f30e23719fd828eaf00048c
SSDeep
49152:+lUyXThdnsKRCuYzavHA6lIIGK8DQUa1CWJOPwHyoSdpLW0IZvMcbC9yS:+lPX3nFRgMruQDlOoSdJOZvMkuh
TLSH
6FC533424E34DD307C37937C567170920DCAF9A1AC8B6A9C722C52992FA7ACD375CE1A
54 files
ZIP8c5498aff007b3276210446e376fbdae
7Z¶„ÕÇå†ÎÎļþ.pdf 1.exe.exe
Structure
BIN.Net Resources
7ZNexifySetup.g.resources
7Z7z-stream @ 0x00020BB9.7z
BINcostura.costura.dll.compressed
DLLcostura.costura.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINcostura.puresharpcompress.dll.compressed
7Zcostura.puresharpcompress.dll
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:0
7Z7z-stream @ 0x0008F2F0.7z
BINcostura.system.buffers.dll.compressed
DLLcostura.system.buffers.dll
Structure
BIN.Net Resources
BINFxResources.System.Buffers.SR.resources
P7B[Authenticode]_8c38879e.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINcostura.system.memory.dll.compressed
DLLcostura.system.memory.dll
Structure
BIN.Net Resources
BINFxResources.System.Memory.SR.resources
P7B[Authenticode]_15ab3250.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINcostura.system.numerics.vectors.dll.compressed
DLLcostura.system.numerics.vectors.dll
Structure
BIN.Net Resources
BINFxResources.System.Numerics.Vectors.SR.resources
P7B[Authenticode]_ae030d4d.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINcostura.system.runtime.compilerservices.unsafe.dll.compressed
DLLcostura.system.runtime.compilerservices.unsafe.dll
Structure
P7B[Authenticode]_81de04f4.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BINcostura.system.text.encoding.codepages.dll.compressed
DLLcostura.system.text.encoding.codepages.dll
Structure
P7B[Authenticode]_b12a45fe.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:0
BIN.Net Resources
BINFxResources.System.Text.Encoding.CodePages.SR.resources
NLPcodepages.nlp
XMLILLink.Substitutions.xml
BINcostura.metadata
P7B[Authenticode]_db101191.p7b
BINResources
BINRT_ICON
BINID:0001
IMGID:0
IMGID:0-preview.png
BINID:0002
IMGID:0
IMGID:0-preview.png
BINID:0003
IMGID:0
IMGID:0-preview.png
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
IMGID:0
IMGID:0-preview.png
BINID:0006
IMGID:0
IMGID:0-preview.png
BINRT_GROUP_CURSOR4
BINID:7F00
BINID:0
BINRT_VERSION
BINID:0001
BINID:0
7Z7z-stream @ 0x00033B9D.7z
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 8
STICH kept: 3secondary ignored: 5
bin
4img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>pe:exe>arc:7zsfx>arc:7z
Shape
arc:zip>pe:exe>arc:7zsfx>arc:7z
4 nodes
Path
arc:zip>pe:exe>pe:dll>arc:7zsfx
Shape
arc:zip>pe:exe>pe:dll>arc:7zsfx
4 nodes
54 files
ZIP8c5498aff007b3276210446e376fbdae
7Z¶„ÕÇå†ÎÎļþ.pdf 1.exe.exe
No malware configuration was found at this point.
You must be signed in to view YARA rules.