Suspicious
Suspect

bf1a140fb94ee588495ac832507ae3b8

Share on LinkedIn
Print
ZIP Archive
MD5: bf1a140fb94ee588495ac832507ae3b8
Size: 2.79 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 bf1a140fb94ee588495ac832507ae3b8
Sha1 28a7c80bacb7898b9f94a3f3b2010c8e35a584b9
Sha256 b81d2eb623688c933d9461fe40ebc3be7510d5180efbfee52af1bf9631fc9482
Sha384 3b5f9bce6a1db139f5662784c18d259e7237370a29888c00c44c0ae8d0966d2247daa90103bf792f277dc71fef7ab4f4
Sha512 54ad622b3b5c1b7a96528d181aa4760b4016451f5692c513afdf643c3461187ac9fcf8dc883664ed80867ad2191b590127e4f6756ae8fc8a0fba1efcdc50ffcf
SSDeep 49152:dqF4IYDaaSMvp1k+1+taJT9vzRD986xw7kOD1SHBOtscDl4NEisUJHmdBftRwCfv:dqFr+VZpPtT9rnxw7J1SgtMEZqHSf/fv
TLSH CBD533DC1A34F40941ED4A419B2D5379C33D797952B9B242C1BC82DBAAF75E0E1FA22C
[Authenticode]_22571045.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:1033-preview.png
RT_GROUP_CURSOR4
ID:0065
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Everything.ini
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 2secondary ignored: 4
bin 3img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe>arc:7z
Shape arc:zip>pe:exe>arc:7z
3 nodes
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙