Malicious
Malicious

941aeec9078ac1b91dd87e04c8eaed0d

Share on LinkedIn
Print
Rar Archive
MD5: 941aeec9078ac1b91dd87e04c8eaed0d
Size: 4.76 MB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 941aeec9078ac1b91dd87e04c8eaed0d
Sha1 a7e7fa85f396d0393332466242e305d6a8882e2c
Sha256 59632b6a8c8506471691f21bd279de29ae8cecdd93e3d86d809f3e48a1a23420
Sha384 fad839e7ac254bbc3309a63c4eae5f89b6cf4ae5a86950b6203ac462efbb7cf01258e85a7c268bc72ce35f6f57831fcd
Sha512 b383b608c7e04d6b11314c5ea9d117c42eb79343cb499ff282bd73960391a941145aadbd60d76b3117582d74ad580be9aaad1388d2bca436f8588eefd94436b0
SSDeep 49152:qBcFzF6h5a1ejI/Xc0hdLJf3qSXfE0uJ+H7GXT2YRY99NaVIUrbcP8YCev0GS/E0:qBguI/sgeSFuT2bACUc0M0GFQ
TLSH 56269E06B89059ADC499773148F36112B738B8081B3A67D72E60A6B63F333E15CB7F56
Xeno_v1.3.48031_tW7VB5
Malicious
[Authenticode]_7a10d908.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.data
.rdata
.pdata
.xdata
.bss
.edata
.idata
.CRT
.tls
.reloc
4
19
31
45
57
70
81
92
[Authenticode]_3dfccf0e.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:rar>pe:dll~T1027~T1055>bin
Shape arc:rar>pe:dll>bin
malicious 3 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙