Malicious
ZIP Archive
MD5: a17cd1594cbc00c75fa251091813522d
Size: 487.15 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
487.15 KB · 487,153 B
First seen
2026-10-06 08:16 · 19 days ago
Last seen
2026-10-06 08:16 · 19 days ago
Last analysis
2026-10-06 08:17 · 19 days ago
Hashes
MD5
a17cd1594cbc00c75fa251091813522d
Sha1
ec4f19ccbfe2a8cc6225ace46211d62549a60e4a
Sha256
119a6033913ece3014c32535f0280d69544055b432b2eab999898da6420ee17f
Sha384
f575aa10d32d28428a5ee064d4af719298c33787dd2bc9e6efc83147e0b8731b06bd54bf6c9291736c400f2efbf8a9c2
Sha512
a0ee7c0dc9ff42cf92c664a7adf3f19469f6c84aee3f830f4ad940fe1330a0d91b50f88e5096d7e758eab683b2496f2c83c2cd14321c156e637312ba24bd1e39
SSDeep
12288:or06BUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZ1:or06BUv4t1cNk/wjibhv4b2OnT
TLSH
46A4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13
2 malicious · 5 files
ZIPa17cd1594cbc00c75fa251091813522dT1027 · T1059.005
CMDApplication.cmd
VBScert.txtT1027 · T1059.005
VBScert.txt.deobfuscated.vbsT1059.005
EXEutil.exe
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 2secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:vbs~T1027~T1059.005
Shape
arc:zip>scr:vbs
technique2 nodes
Path
arc:zip>pe:exe
Shape
arc:zip>pe:exe
2 nodes