Malicious
Malicious

941aeec9078ac1b91dd87e04c8eaed0d

Rar Archive
MD5: 941aeec9078ac1b91dd87e04c8eaed0d
Size: 4.76 MB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 941aeec9078ac1b91dd87e04c8eaed0d
Sha1 a7e7fa85f396d0393332466242e305d6a8882e2c
Sha256 59632b6a8c8506471691f21bd279de29ae8cecdd93e3d86d809f3e48a1a23420
Sha384 fad839e7ac254bbc3309a63c4eae5f89b6cf4ae5a86950b6203ac462efbb7cf01258e85a7c268bc72ce35f6f57831fcd
Sha512 b383b608c7e04d6b11314c5ea9d117c42eb79343cb499ff282bd73960391a941145aadbd60d76b3117582d74ad580be9aaad1388d2bca436f8588eefd94436b0
SSDeep 49152:qBcFzF6h5a1ejI/Xc0hdLJf3qSXfE0uJ+H7GXT2YRY99NaVIUrbcP8YCev0GS/E0:qBguI/sgeSFuT2bACUc0M0GFQ
TLSH 56269E06B89059ADC499773148F36112B738B8081B3A67D72E60A6B63F333E15CB7F56
Xeno_v1.3.48031_tW7VB5
Malicious
[Authenticode]_7a10d908.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
[Authenticode]_3dfccf0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:rar>pe:dll~T1027~T1055>bin
Shape arc:rar>pe:dll>bin
malicious 3 nodes
Xeno_v1.3.48031_tW7VB5
Malicious
[Authenticode]_7a10d908.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
[Authenticode]_3dfccf0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙