Malicious
ZIP Archive
MD5: 92538ed809c5b77e8582be4fedd307fd
Size: 9.42 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 92538ed809c5b77e8582be4fedd307fd |
| Sha1 | 606767bb4d2462f9b70e3b2e4fda152c93e44cb7 |
| Sha256 | 51a371c23d6bb298259d5cd10f8bd86b16e992a9d80c107a69eaa60e2bc793a3 |
| Sha384 | 848f9727906f22b108e725e759a314f0a99170eb2b793651be504e29431d7f6da13ca45929630f2dd4cf91b15940abbf |
| Sha512 | ef4ba81bbf13960a55f56fa65bc6ab0213b6f75c710f1a7039ac544e7801d89d53beaa6768e043092feb9769adef0ac9723a33afdbafa3618df53461f550ea20 |
| SSDeep | 196608:OZofd9Y6YRe6KmxoVnlLHeElIbjSC02wSicFERjkf2bz1JgMl2m:OZU9Y5e6Kmxo/L+jvSC0Fcwj2m1J/ld |
| TLSH | 939633E8695387A61D49A77F90516B93BA0C39CDAD42D5042712E8F41A090F3A7B3BFC |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 6
STICH kept: 3secondary ignored: 3
bin
2img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>scr:ps1~T1059.001~T1105
Shape
arc:zip>scr:ps1
technique2 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential