Suspicious
Suspect

a342a91ee2eb92cb6b2bda3ebcf8f7b3

ZIP Archive
MD5: a342a91ee2eb92cb6b2bda3ebcf8f7b3
Size: 2.03 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 a342a91ee2eb92cb6b2bda3ebcf8f7b3
Sha1 c34481a48b7f9e65c4351ddaa74d78f1b2374574
Sha256 e45995e5e4368d79bc1ecbbc0e6236c24bb92ee470d4ad35f73882d63be40b15
Sha384 8592f6007d65cecb569f80f7f5f1b57846ef645f154ecf33d749eb2c63f9def4613f5a7015047809ebde51e258e436db
Sha512 48216d54314a06e426f16c35aaa9051badd33b71c066a087159c97059e2cd68c182417bc5c1a4d9a81be23e4c83bb99ca55740805cee1807bead4ae14640f9aa
SSDeep 49152:BsMjAwz/5RHm941uLsC0D7mXNx0+tcaqHPXdK51m85+:GMjHjzmuALi2U+tcLHPC1f0
TLSH 349533E857E2D25BB51120C1E4F1DFF8AAD6138638F46ED3252E12819953D32EE878CD
a342a91ee2eb92cb6b2bda3ebcf8f7b3
app.asar
0x0011F32A.svg
0x0011F32A.svg-preview.jpg
0x0011F6C2.svg
0x0011F6C2.svg-preview.jpg
0x00449B77.svg
0x00449B77.svg-preview.jpg
0x0044A818.svg
0x0044AA00.svg
0x0045A7A2.svg
0x0045A7A2.svg-preview.jpg
0x004A9EE5.svg
0x004A9EE5.svg-preview.jpg
0x004AA87B.svg
0x004AA87B.svg-preview.jpg
0x004AABA3.svg
0x004AABA3.svg-preview.jpg
0x004BCCCE.svg
0x004BCCCE.svg-preview.jpg
0x004BCEA5.svg
0x004BCEA5.svg-preview.jpg
[Base64-Block@0x001E8427]
[Base64-Block-Decoded]
[Base64-Block@0x001EDB35]
[Base64-Block-Decoded]
Info.plist
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>html>enc:b64
Shape arc:zip>html>enc:b64
3 nodes
a342a91ee2eb92cb6b2bda3ebcf8f7b3
app.asar
0x0011F32A.svg
0x0011F32A.svg-preview.jpg
0x0011F6C2.svg
0x0011F6C2.svg-preview.jpg
0x00449B77.svg
0x00449B77.svg-preview.jpg
0x0044A818.svg
0x0044AA00.svg
0x0045A7A2.svg
0x0045A7A2.svg-preview.jpg
0x004A9EE5.svg
0x004A9EE5.svg-preview.jpg
0x004AA87B.svg
0x004AA87B.svg-preview.jpg
0x004AABA3.svg
0x004AABA3.svg-preview.jpg
0x004BCCCE.svg
0x004BCCCE.svg-preview.jpg
0x004BCEA5.svg
0x004BCEA5.svg-preview.jpg
[Base64-Block@0x001E8427]
[Base64-Block-Decoded]
[Base64-Block@0x001EDB35]
[Base64-Block-Decoded]
Info.plist
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙