Suspicious
Suspect

aaa451c2200e205d2d18be265cecf4eb

ZIP Archive
MD5: aaa451c2200e205d2d18be265cecf4eb
Size: 584.48 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 aaa451c2200e205d2d18be265cecf4eb
Sha1 c2a862f14a07bdee5f42d18501a625c81e351f9f
Sha256 9d31478243df8782c159605075bf99b5c80a42e43f57e2192bfd3d90b8dc68d5
Sha384 9d3b0d1dc24b71c3c834da0688810aeaee5f3479d4865e2cc807100bc64f432ebd237cbeb89bad580705276195dde59e
Sha512 3ecb68b3f6d31493d2c19637b098751577a8af3d7ea2730348f03111dbe2dd111d1e5e65af7668815ca831274d96643258212de330d68435e2dfa20684e264e4
SSDeep 12288:D6wlOMWROC/FTeHo22Qm7NzofOr68m4eA924EwC6:74MQOC/gHozN7NzomW8WA9t
TLSH CFC42304340651D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7FD06DE92A173C1837
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙