Suspicious
Suspect

ab917b4d771e88c6313e58cf1e0b0442

ZIP Archive
MD5: ab917b4d771e88c6313e58cf1e0b0442
Size: 693.16 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ab917b4d771e88c6313e58cf1e0b0442
Sha1 cfe16ea87f4d2402fa836284a7201c4cf3c0a345
Sha256 ecbbf5c7f1fac026dbaa74e8dac630730b4a49fbbb9fd59c333c48c28768ebfb
Sha384 10bca623a930f826caeccfb91b2ed87144740162918ba2601935e30a642d96c1d0769bf0900e687d4e3e333a8ac89c6b
Sha512 fe93642ad8d43e91e157c3e347f345a98b7a565179d2f90e949f409070e663587522e2ac1f62616e3d9911a64138d2c87c0f913630e5ec6a67343b12d132ba80
SSDeep 12288:CKD92vPyY7v73lFw/xs5XU/03I9YuNg7ItRLtEdamN2LN/Ozzwb0XN6W6M:Fapv5Fw/mdU/UI9Y+wERLS/0/YzLdSM
TLSH 25E433AFAA996B62F71902F352C1BDDC106C3B1A52652CB3D6201CDD0FBF1E8B871654
ab917b4d771e88c6313e58cf1e0b0442
Exodus.app
Contents
Info.plist
_CodeSignature
CodeResources
MacOS
Resources
login_bg_top.png
login_bg_top.png-preview.png
index.html
0x00002242.svg
0x00002242.svg-preview.jpg
0x00002AAA.svg
0x00002AAA.svg-preview.jpg
bip39-words.js
exodus-logo.svg
exodus-logo.svg-preview.jpg
pass-show.svg
pass-show.svg-preview.jpg
login_bg.svg
login_bg.svg-preview.jpg
login_bg_top.svg
login_bg_top.svg-preview.jpg
AppIcon.icns
lock-wallet.svg
lock-wallet.svg-preview.jpg
Assets.car
put_seed.html
0x00001DC4.svg
0x00001DC4.svg-preview.jpg
0x0000258A.svg
0x0000258A.svg-preview.jpg
0x00002996.svg
0x00002996.svg-preview.jpg
0x00002F84.svg
0x00002F84.svg-preview.jpg
0x0000329B.svg
0x0000329B.svg-preview.jpg
pass-hide.svg
pass-hide.svg-preview.jpg
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
img 2bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>html
Shape arc:zip>html
2 nodes
ab917b4d771e88c6313e58cf1e0b0442
Exodus.app
Contents
Info.plist
_CodeSignature
CodeResources
MacOS
Resources
login_bg_top.png
login_bg_top.png-preview.png
index.html
0x00002242.svg
0x00002242.svg-preview.jpg
0x00002AAA.svg
0x00002AAA.svg-preview.jpg
bip39-words.js
exodus-logo.svg
exodus-logo.svg-preview.jpg
pass-show.svg
pass-show.svg-preview.jpg
login_bg.svg
login_bg.svg-preview.jpg
login_bg_top.svg
login_bg_top.svg-preview.jpg
AppIcon.icns
lock-wallet.svg
lock-wallet.svg-preview.jpg
Assets.car
put_seed.html
0x00001DC4.svg
0x00001DC4.svg-preview.jpg
0x0000258A.svg
0x0000258A.svg-preview.jpg
0x00002996.svg
0x00002996.svg-preview.jpg
0x00002F84.svg
0x00002F84.svg-preview.jpg
0x0000329B.svg
0x0000329B.svg-preview.jpg
pass-hide.svg
pass-hide.svg-preview.jpg
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙