Malicious
Malicious

b6ec476496e1b658efaa6426090e82a0

Rar Archive
MD5: b6ec476496e1b658efaa6426090e82a0
Size: 2.02 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b6ec476496e1b658efaa6426090e82a0
Sha1 17c80b97b8090c558daf55070d5b7001009fe84f
Sha256 c63d3b36b0606cce8e57ce4fed83e4f8c259a82f5754d2409f0b719f134dd57b
Sha384 fcf44e3c66ac614b6997f44ad4d26bd7ee5dc578688d3b72631beae5802dd86f0e163b4f1dd323859e345f72acdd3f75
Sha512 8e12eda1aca59fdf23e4a736e43c4dff627ab53c188c1096bd94e13d6c32187d1aba416d3226634fcc5bedabf6b7f9663600912ad842c4523f321906ca261e40
SSDeep 48:ZSi/ZsVb5G8NOAuLFef6R3mytVRypNsv9Oigy9xxvXR2BOPj:ZS2ME8QRLgrmDv9OiR7xv26j
TLSH 5F41280488F17BE1610DD9E4DA46C282F2BAB26E1D3FB82C255D3220A728E49E6E1459
b6ec476496e1b658efaa6426090e82a0
Malicious
Celní úřad – 25CZ500000027QHLB0.bat
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:rar>scr:ps1~T1027~T1059.001
Shape arc:rar>scr:ps1
malicious 2 nodes
b6ec476496e1b658efaa6426090e82a0
Malicious
Celní úřad – 25CZ500000027QHLB0.bat
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙