Malicious
ZIP Archive
MD5: acce8788e1f12571ed0b85bd329515c3
Size: 7.1 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | acce8788e1f12571ed0b85bd329515c3 |
| Sha1 | 51b301c0bf99af48afae07426837e7d7f7536dba |
| Sha256 | bf44090998d03a3a2764a620dfd2e6a3cfaefb5a9570fac1bb70cab1d0f0a257 |
| Sha384 | 56fd5fcb49a2dc19901075bab00b679fb6a054f3638a5e261ead101691d41f23b22a49a94bc339d37176fce8eab3aac3 |
| Sha512 | 1b8050c830a26e22ba51c04b580ba8296b9f3015cf3f47eb130c5ce02c7c53a7ab7353dcd64676cb32f0c3b111f63914079bfa2797344b29c1376ccbfbfd7dd1 |
| SSDeep | 196608:QbapblOOJKWl3FS2TjN2qaxbe4Zx2iXz/ntmvFhyjmHk:QbaPOzWl9TJEBjZx2MtCyaHk |
| TLSH | 166633FE96011CAEC22F6972E5C5216FC1F0792D44FCD0DA16474BA89622EDD6A38D33 |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 15
STICH kept: 9secondary ignored: 6
bin
3img
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
9 / 9
Path
arc:zip>scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1>scr:vbs>scr:ps1
malicious
4 nodes
Path
arc:zip>scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape
arc:zip>scr:ps1>scr:vbs
malicious
3 nodes
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
URL in PowerShell #1
URImalicious
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$Errorhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$Errorhuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$Errorhuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Command (COM trace) #1
UNKNWOWNmalicious
notepahuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
echo.
huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
optionhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"' Deohuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
" Deobhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
deobfuhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential