Malicious
b6ec476496e1b658efaa6426090e82a0
Rar Archive
MD5: b6ec476496e1b658efaa6426090e82a0
Size: 2.02 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
2.02 KB · 2,019 B
First seen
2026-07-24 12:31 · 3 months ago
Last seen
2026-07-24 12:31 · 3 months ago
Last analysis
2026-07-25 08:11 · 3 months ago
Hashes
MD5
b6ec476496e1b658efaa6426090e82a0
Sha1
17c80b97b8090c558daf55070d5b7001009fe84f
Sha256
c63d3b36b0606cce8e57ce4fed83e4f8c259a82f5754d2409f0b719f134dd57b
Sha384
fcf44e3c66ac614b6997f44ad4d26bd7ee5dc578688d3b72631beae5802dd86f0e163b4f1dd323859e345f72acdd3f75
Sha512
8e12eda1aca59fdf23e4a736e43c4dff627ab53c188c1096bd94e13d6c32187d1aba416d3226634fcc5bedabf6b7f9663600912ad842c4523f321906ca261e40
SSDeep
48:ZSi/ZsVb5G8NOAuLFef6R3mytVRypNsv9Oigy9xxvXR2BOPj:ZS2ME8QRLgrmDv9OiR7xv26j
TLSH
5F41280488F17BE1610DD9E4DA46C282F2BAB26E1D3FB82C255D3220A728E49E6E1459
4 malicious · 5 files
RARb6ec476496e1b658efaa6426090e82a0T1027 · T1059.001
PS1Celní úřad – 25CZ500000027QHLB0.batT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:rar>scr:ps1~T1027~T1059.001
Shape
arc:rar>scr:ps1
malicious
2 nodes
4 malicious · 5 files
RARb6ec476496e1b658efaa6426090e82a0T1027 · T1059.001
PS1Celní úřad – 25CZ500000027QHLB0.batT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account