Malicious
bc702c37cbff921c378b62a270ec3568
ZIP Archive
MD5: bc702c37cbff921c378b62a270ec3568
Size: 3.16 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
3.16 MB · 3,157,445 B
First seen
2026-07-18 20:46 · 3 months ago
Last seen
2026-07-18 20:46 · 3 months ago
Last analysis
2026-07-19 04:29 · 3 months ago
Hashes
MD5
bc702c37cbff921c378b62a270ec3568
Sha1
a26239e234bcfda7fbc794927c06ba4a4beb627e
Sha256
5fbed74e14ac66724e9d88829ade0c3d7f640288d902f7721eca96eab632d165
Sha384
9be7e06f3e4f624956d68cf1986965764d364be97365d22899be36aa8e3701ff6633218ee7642ac46bcf2e16353a9d24
Sha512
61c4d3ebf2b306f1440b889015fbc9f94058dac74e55b6f3990e3dbb669d346e08beba02b806e3767b73206ff3936dde5f5600cfdc511b74bcf191edb13d3ae4
SSDeep
49152:6Xng9gC8zwsqF+/U5i6SbJMbbQ33d32hDOgKCCRefVI:6Xgm5qEsA6wJEQn2OlQfVI
TLSH
CCE5F01624AA0F94DD9C027890DB0F46679DFF0A620AD71F4362F26FBFF67B09928441
5 malicious · 36 files
ZIPbc702c37cbff921c378b62a270ec3568CVE-2019-9674
A3Xsetup.exe
A3XProper.a3x
A3XautE29A.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
Structure
P7B[Authenticode]_147eb74a.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:2057
BINID:0002
BINID:2057
BINID:0003
BINID:2057
BINID:0004
BINID:2057
BINID:0005
BINID:2057
BINID:0006
BINID:2057
BINID:0007
IMGID:2057
IMGID:2057-preview.png
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:000D
BINID:2057
BINRT_MENU
BINID:00A6
BINID:2057
BINRT_DIALOG
BINID:03E8
BINID:2057
BINRT_STRING
BINID:0007
BINID:2057
BINID:0008
BINID:2057
BINID:0009
BINID:2057
BINID:000A
BINID:2057
BINID:000B
BINID:2057
BINID:000C
BINID:2057
BINID:0139
BINID:2057
BINRT_GROUP_CURSOR4
BINID:0063
BINID:2057
BINID:00A2
BINID:2057
BINID:00A4
BINID:2057
BINID:00A9
BINID:2057
BINRT_VERSION
BINID:0001
BINID:2057
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
4 / 4
Path
arc:zip>pe:exe>pe:exe>pe:rsrc>bin
Shape
arc:zip>pe:exe>pe:exe>pe:rsrc>bin
malicious
5 nodes
Path
arc:zip>pe:exe>pe:exe>pe:rsrc>img
Shape
arc:zip>pe:exe>pe:exe>pe:rsrc>img
malicious
5 nodes
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 36 files
ZIPbc702c37cbff921c378b62a270ec3568CVE-2019-9674
A3Xsetup.exe
A3XProper.a3x
A3XautE29A.tmp.tok
A3X[Cleaned].au3
EXEAutoIt3.exe
No malware configuration was found at this point.
PE Layout
UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
bc702c37cbff921c378b62a270ec3568 › setup.exe
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account