Malicious
bc328b60a4ba56715ca07ee468e01a54
Rar Archive
MD5: bc328b60a4ba56715ca07ee468e01a54
Size: 325.48 KB
application/vnd.rar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Rar archive
Size
325.48 KB · 325,481 B
First seen
2026-10-14 15:30 · 11 days ago
Last seen
2026-10-14 15:30 · 11 days ago
Last analysis
2026-10-14 15:33 · 11 days ago
Hashes
MD5
bc328b60a4ba56715ca07ee468e01a54
Sha1
1699abc386e169d90e79caabb7f491c1c8d57efb
Sha256
1b938eb88362d224f9686d5a0d9fb9f9e5a2fc3fa5b029d14f34dd9e1bda44e1
Sha384
e61e4bdd6525173f1764cd74645e7c8928c86096472da5bd753a2a0b4adac430a2b7736629d2c907bf224ecb1d71bf5a
Sha512
4688e1ade37e652f91b6a03af1695589a6ff4ba52d6e8521d380184066ba7459f126b7cf839be3d52fa6560fee055c8aac671abdff269ca770ca897ca7bf1c6c
SSDeep
6144:zlkpW/C0oYejEEzyEwbT5yAJFrAixZUxzkdGeubv9zsgFBitPYvmK:zlkpCfTN+yEsFrAixZaazoz9FBitPYvP
TLSH
596423B02E0481D3512F5C38BA7019667F99EE3F2512BAC6C02FC1E8DA57D286967393
4 malicious · 31 files
RARbc328b60a4ba56715ca07ee468e01a54T1059.005
OFFRFQ 413011-01479-PIP-RFQ-0009 Welded Pipes.MSIT1059.005
BINMainExeFile
BINScriptFile
BINRoot Entry
BIN䡀䌏䈯
BIN䄦㡥䆾䅤T1059.005
EXEMainExeFile
Structure
BINOverlay_ebf698f9.bin
BIN(folder)
BIN4
BINResources
BINRT_MANIFEST
BINID:0001
BINID:0
VBSScriptFileT1059.005
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 4
STICH kept: 1secondary ignored: 3
bin
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:rar>ole:doc>bin>scr:vbs~T1059.005
Shape
arc:rar>ole:doc>bin>scr:vbs
technique4 nodes
4 malicious · 31 files
RARbc328b60a4ba56715ca07ee468e01a54T1059.005
OFFRFQ 413011-01479-PIP-RFQ-0009 Welded Pipes.MSIT1059.005
BINMainExeFile
BINScriptFile
BINRoot Entry
BIN䡀䌏䈯
BIN䄦㡥䆾䅤T1059.005
EXEMainExeFile
VBSScriptFileT1059.005
BIN䡀䈖䌧䠤
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BINSummaryInformation
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account