Suspicious
Suspect

bf1a140fb94ee588495ac832507ae3b8

ZIP Archive
MD5: bf1a140fb94ee588495ac832507ae3b8
Size: 2.79 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bf1a140fb94ee588495ac832507ae3b8
Sha1 28a7c80bacb7898b9f94a3f3b2010c8e35a584b9
Sha256 b81d2eb623688c933d9461fe40ebc3be7510d5180efbfee52af1bf9631fc9482
Sha384 3b5f9bce6a1db139f5662784c18d259e7237370a29888c00c44c0ae8d0966d2247daa90103bf792f277dc71fef7ab4f4
Sha512 54ad622b3b5c1b7a96528d181aa4760b4016451f5692c513afdf643c3461187ac9fcf8dc883664ed80867ad2191b590127e4f6756ae8fc8a0fba1efcdc50ffcf
SSDeep 49152:dqF4IYDaaSMvp1k+1+taJT9vzRD986xw7kOD1SHBOtscDl4NEisUJHmdBftRwCfv:dqFr+VZpPtT9rnxw7J1SgtMEZqHSf/fv
TLSH CBD533DC1A34F40941ED4A419B2D5379C33D797952B9B242C1BC82DBAAF75E0E1FA22C
[Authenticode]_22571045.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Everything.ini
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 2secondary ignored: 4
bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe>arc:7z
Shape arc:zip>pe:exe>arc:7z
3 nodes
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
[Authenticode]_22571045.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Everything.ini
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙