Suspicious
Suspect

b98875a1b24de6576fee1716b5b2c63d

ZIP Archive
MD5: b98875a1b24de6576fee1716b5b2c63d
Size: 584.58 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 b98875a1b24de6576fee1716b5b2c63d
Sha1 b1822ced38059443689ad882deaa0b71dfef70f5
Sha256 b1ab6fc62cbfe0e2c20a1104f1a86aed67c1a6f9d5ee6c27c57fbcd87677b3b6
Sha384 f802c1230afde32e5aa457beff5e184c52c2ccc8690084cfea07b6b8eaf646615fbf70794a26ce33a6624f75d5c27d66
Sha512 f425032a939de16ccc36705bb427eb7445b6689c48ea802f1d841ebac7dbed0fbbeb2e2e7616a21f0d09fab71b38b9a1ce21e758a07377113d52183592c29562
SSDeep 12288:wA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9NNzpWNSFyorOIic/7MPg:bm6Jj6ESfUxZ91kmY/99z8sFXicTP
TLSH 72C423692755F0C46206F3FC828CBCD886EF14F98B9315BAC90FA585F456257BB2218F
Activate.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
package.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Activate.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
package.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙