Suspicious
Suspect

cbd216c8b52f4a163d2601e9e46faf65

Rar Archive
MD5: cbd216c8b52f4a163d2601e9e46faf65
Size: 5.89 MB
application/vnd.rar

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cbd216c8b52f4a163d2601e9e46faf65
Sha1 4d2b05c31db80cf06bc6445a6ce94a2726e33a76
Sha256 12ec7ba210bc2c6541cf9785c93eea4b32a430b2ce7f91e1f127489173c7cbec
Sha384 a4e81928ff7ed221711f1d31889e1539a8928ee75df6452255be3639e343348e5cc33997ee284d020d870c084d3de380
Sha512 852a93dab554268e780debf6ca38ce665e62ecdb9ef7929aae857181c287b18dd1a46e85c6aab0adb4dc4073bcb0f4997da6ca7fe1008d3b3022e5ca1ac59e10
SSDeep 98304:LTyJF/HyKSwWDiDPiWytKm4fvsWteIMF8Q+X3q/fG7bScoyz1mjtW3eju14Jyiv:LT2ZSCWODPiWsKmYM6QZOPo2C4uK1Iyg
TLSH 6B56334AE75D4D2AC6652DFD21C18052E0BB7286FCDA20DE4B4C7C1B9F47A4AD34D88B
cbd216c8b52f4a163d2601e9e46faf65
Payload
decrypt.day
App.app
AppIcon76x76@2x~ipad.png
Base.lproj
LaunchScreen.storyboardc
01J-lp-oVM-view-snD-IY-ifK.nib
UIViewController-01J-lp-oVM.nib
Info.plist
Main.storyboardc
UIViewController-BYZ-38-t0r.nib
Info.plist
SC_Info
App.v5.supf
App.v4.supp
Manifest.plist
_CodeSignature
CodeResources
config.xml
public
__next._tree.txt
_next
static
chunks
13gf99jywv7p7.js
232vlti9c_c11.js
12gta4qxzlq4x.js
048aw8br43ao7.js
1nq5_7dr_ainf.js
14mrh2-p_w84d.js
30bnjj6vgfscr.js
3c07g1p3zh2rx.js
2yby5hqarruph.js
0ihnq7a4noezq.js
2mu_lfzt0j-6j.js
0g5abbqb5po0e.js
05-c3ty_6dwfk.js
0z2ed_nqoa2xw.js
04slycgkz-vc4.js
1em672j_boty1.js
1eglloh0s_w8l.js
3n424-3g8yz2w.js
1zugp0sz-lja3.js
309imioo5wq2o.js
23m5rk4ugez5b.js
0cz1d0mv5g_q7.js
1_1ucwckdgibg.js
3pkcsovx90omn.js
1aa-x_yx9iw-w.js
1pcqlt5urf31m.js
0gk4suwq4fl66.js
1fzv0sfx6i4xf.js
1ccjbtagtx3fc.css
3e8wair0uyiaz.js
3i90lngu8euqa.js
27jktro2p5rq9.js
turbopack-23j0dd6o6emhl.js
Vrz2zIOTKjWyIP2fDdXjP
_buildManifest.js
_ssgManifest.js
_clientMiddlewareManifest.js
media
5f9d24ebef5d5292-s.19xuq3td7fwu_.woff2
0da9c7f357bd9d4d-s.1975l3y3401x_.woff2
6c55a692938ebbbc-s.1emuuracu50qd.woff2
a218039a3287bcfd-s.p.43zbiuwnnoiok.woff2
favicon.291fqrje7jvnu.ico
e2334d715941921e-s.p.3o_v2fun1jzxk.woff2
4e1c87b7aa9e2f2f-s.3o02-8iknf6dl.woff2
41e95f694c5c4549-s.2b_sldcwg6mn_.woff2
bdc7e24a509eb931-s.0ynx40_3oa9rk.woff2
dd14639a62c56cb2-s.0kda-l-rfpyyq.woff2
d0d9446e69c4847e-s.3h31fjnwrfycc.woff2
798ea22d9983e047-s.3go-kn2r40gie.woff2
47fe1b7cd6e6ed85-s.p.3bh2vc0w-r-ll.woff2
0a7740363b4d4863-s.3ji57o093q1kd.woff2
apple-icon.04g28lxvu06g1.png
apple-icon.04g28lxvu06g1.png-preview.png
8e6fa89aa22d24ec-s.p.2o7m9ogm38dql.woff2
icon.0xi62tsxng8yj.svg
icon.0xi62tsxng8yj.svg-preview.jpg
b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2
3fd967fc5374d70a-s.42u1-lj4buy61.woff2
b53057dbf91a7acf-s.11ypmpdlzqdb_.woff2
hdri
__next._head.txt
settings
__next._tree.txt
__next._full.txt
__next._index.txt
__next.settings.__PAGE__.txt
__next.settings.txt
amin-face.webp
amin-face.webp-preview.png
climb
__next._tree.txt
__next.climb.__PAGE__.txt
__next._full.txt
privacy
__next._tree.txt
__next._head.txt
__next.privacy.__PAGE__.txt
__next._full.txt
climb-admin
__next._tree.txt
__next._full.txt
__next.climb-admin.__PAGE__.txt
hop
__next._tree.txt
__next.hop.__PAGE__.txt
__next._full.txt
file.svg-preview.jpg
delete
__next._tree.txt
__next._full.txt
__next.delete.__PAGE__.txt
cordova.js
__next._full.txt
rules.txt
login.txt
admin
__next._tree.txt
reveal
__next._tree.txt
preview.html
__next.admin.reveal.__PAGE__.txt
__next._full.txt
preview.txt
preview
__next.admin.reveal.preview.__PAGE__.txt
__next._tree.txt
__next._full.txt
__next.admin.__PAGE__.txt
models
LICENSE.md
xcr
char
chicken
0.png-preview.png
env
lily_pad
0.png-preview.png
tree_1
0.png-preview.png
tree_0
0.png-preview.png
log
0.png-preview.png
tree_2
0.png-preview.png
boulder_0
0.png-preview.png
boulder_1
0.png-preview.png
tree_3
0.png-preview.png
vehicles
green_car
0.png-preview.png
orange_car
0.png-preview.png
purple_car
0.png-preview.png
train_back
0.png-preview.png
police_car
0.png-preview.png
train_middle
0.png-preview.png
blue_truck
0.png-preview.png
red_truck
0.png-preview.png
blue_car
0.png-preview.png
taxi
0.png-preview.png
train_front
0.png-preview.png
sounds
cashout.mp3
run
step2.ogg
step1.ogg
pickup.ogg
death.ogg
stumble.ogg
climb-admin.html
__next.__PAGE__.txt
vercel.svg
vercel.svg-preview.jpg
next.svg-preview.jpg
rules
__next._tree.txt
__next._head.txt
__next.rules.__PAGE__.txt
_not-found
__next._tree.txt
__next._head.txt
__next._not-found.__PAGE__.txt
__next._full.txt
previews
hop.webp-preview.png
stack.webp
stack.webp-preview.png
climb.webp
climb.webp-preview.png
stack
__next.stack.__PAGE__.txt
__next._tree.txt
__next._full.txt
settings.html
globe.svg
globe.svg-preview.jpg
window.svg
window.svg-preview.jpg
login
__next._tree.txt
__next.login.__PAGE__.txt
prizes
airpods.webp
airpods.webp-preview.png
gamingpc.webp
gamingpc.webp-preview.png
monitor.webp
monitor.webp-preview.png
applewatch.webp
applewatch.webp-preview.png
privacy.html
stack.html
0x00001DE0.svg
0x00001DE0.svg-preview.jpg
Frameworks
Cordova.framework
SC_Info
Cordova.v4.supp
Cordova.supp
Cordova.v5.supf
Cordova.supf
_CodeSignature
CodeResources
Info.plist
PrivacyInfo.xcprivacy
Capacitor.framework
native-bridge.js
SC_Info
Capacitor.v5.supf
Capacitor.supf
Capacitor.v4.supp
Capacitor.supp
_CodeSignature
CodeResources
Capacitor
Info.plist
PrivacyInfo.xcprivacy
Info.plist
capacitor.config.json
Assets.car
AppIcon60x60@2x.png
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
img 2bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:rar>arc:zip>html
Shape arc:rar>arc:zip>html
3 nodes
cbd216c8b52f4a163d2601e9e46faf65
Payload
decrypt.day
App.app
AppIcon76x76@2x~ipad.png
Base.lproj
LaunchScreen.storyboardc
01J-lp-oVM-view-snD-IY-ifK.nib
UIViewController-01J-lp-oVM.nib
Info.plist
Main.storyboardc
UIViewController-BYZ-38-t0r.nib
Info.plist
SC_Info
App.v5.supf
App.v4.supp
Manifest.plist
_CodeSignature
CodeResources
config.xml
public
__next._tree.txt
_next
static
chunks
13gf99jywv7p7.js
232vlti9c_c11.js
12gta4qxzlq4x.js
048aw8br43ao7.js
1nq5_7dr_ainf.js
14mrh2-p_w84d.js
30bnjj6vgfscr.js
3c07g1p3zh2rx.js
2yby5hqarruph.js
0ihnq7a4noezq.js
2mu_lfzt0j-6j.js
0g5abbqb5po0e.js
05-c3ty_6dwfk.js
0z2ed_nqoa2xw.js
04slycgkz-vc4.js
1em672j_boty1.js
1eglloh0s_w8l.js
3n424-3g8yz2w.js
1zugp0sz-lja3.js
309imioo5wq2o.js
23m5rk4ugez5b.js
0cz1d0mv5g_q7.js
1_1ucwckdgibg.js
3pkcsovx90omn.js
1aa-x_yx9iw-w.js
1pcqlt5urf31m.js
0gk4suwq4fl66.js
1fzv0sfx6i4xf.js
1ccjbtagtx3fc.css
3e8wair0uyiaz.js
3i90lngu8euqa.js
27jktro2p5rq9.js
turbopack-23j0dd6o6emhl.js
Vrz2zIOTKjWyIP2fDdXjP
_buildManifest.js
_ssgManifest.js
_clientMiddlewareManifest.js
media
5f9d24ebef5d5292-s.19xuq3td7fwu_.woff2
0da9c7f357bd9d4d-s.1975l3y3401x_.woff2
6c55a692938ebbbc-s.1emuuracu50qd.woff2
a218039a3287bcfd-s.p.43zbiuwnnoiok.woff2
favicon.291fqrje7jvnu.ico
e2334d715941921e-s.p.3o_v2fun1jzxk.woff2
4e1c87b7aa9e2f2f-s.3o02-8iknf6dl.woff2
41e95f694c5c4549-s.2b_sldcwg6mn_.woff2
bdc7e24a509eb931-s.0ynx40_3oa9rk.woff2
dd14639a62c56cb2-s.0kda-l-rfpyyq.woff2
d0d9446e69c4847e-s.3h31fjnwrfycc.woff2
798ea22d9983e047-s.3go-kn2r40gie.woff2
47fe1b7cd6e6ed85-s.p.3bh2vc0w-r-ll.woff2
0a7740363b4d4863-s.3ji57o093q1kd.woff2
apple-icon.04g28lxvu06g1.png
apple-icon.04g28lxvu06g1.png-preview.png
8e6fa89aa22d24ec-s.p.2o7m9ogm38dql.woff2
icon.0xi62tsxng8yj.svg
icon.0xi62tsxng8yj.svg-preview.jpg
b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2
3fd967fc5374d70a-s.42u1-lj4buy61.woff2
b53057dbf91a7acf-s.11ypmpdlzqdb_.woff2
hdri
__next._head.txt
settings
__next._tree.txt
__next._full.txt
__next._index.txt
__next.settings.__PAGE__.txt
__next.settings.txt
amin-face.webp
amin-face.webp-preview.png
climb
__next._tree.txt
__next.climb.__PAGE__.txt
__next._full.txt
privacy
__next._tree.txt
__next._head.txt
__next.privacy.__PAGE__.txt
__next._full.txt
climb-admin
__next._tree.txt
__next._full.txt
__next.climb-admin.__PAGE__.txt
hop
__next._tree.txt
__next.hop.__PAGE__.txt
__next._full.txt
file.svg-preview.jpg
delete
__next._tree.txt
__next._full.txt
__next.delete.__PAGE__.txt
cordova.js
__next._full.txt
rules.txt
login.txt
admin
__next._tree.txt
reveal
__next._tree.txt
preview.html
__next.admin.reveal.__PAGE__.txt
__next._full.txt
preview.txt
preview
__next.admin.reveal.preview.__PAGE__.txt
__next._tree.txt
__next._full.txt
__next.admin.__PAGE__.txt
models
LICENSE.md
xcr
char
chicken
0.png-preview.png
env
lily_pad
0.png-preview.png
tree_1
0.png-preview.png
tree_0
0.png-preview.png
log
0.png-preview.png
tree_2
0.png-preview.png
boulder_0
0.png-preview.png
boulder_1
0.png-preview.png
tree_3
0.png-preview.png
vehicles
green_car
0.png-preview.png
orange_car
0.png-preview.png
purple_car
0.png-preview.png
train_back
0.png-preview.png
police_car
0.png-preview.png
train_middle
0.png-preview.png
blue_truck
0.png-preview.png
red_truck
0.png-preview.png
blue_car
0.png-preview.png
taxi
0.png-preview.png
train_front
0.png-preview.png
sounds
cashout.mp3
run
step2.ogg
step1.ogg
pickup.ogg
death.ogg
stumble.ogg
climb-admin.html
__next.__PAGE__.txt
vercel.svg
vercel.svg-preview.jpg
next.svg-preview.jpg
rules
__next._tree.txt
__next._head.txt
__next.rules.__PAGE__.txt
_not-found
__next._tree.txt
__next._head.txt
__next._not-found.__PAGE__.txt
__next._full.txt
previews
hop.webp-preview.png
stack.webp
stack.webp-preview.png
climb.webp
climb.webp-preview.png
stack
__next.stack.__PAGE__.txt
__next._tree.txt
__next._full.txt
settings.html
globe.svg
globe.svg-preview.jpg
window.svg
window.svg-preview.jpg
login
__next._tree.txt
__next.login.__PAGE__.txt
prizes
airpods.webp
airpods.webp-preview.png
gamingpc.webp
gamingpc.webp-preview.png
monitor.webp
monitor.webp-preview.png
applewatch.webp
applewatch.webp-preview.png
privacy.html
stack.html
0x00001DE0.svg
0x00001DE0.svg-preview.jpg
Frameworks
Cordova.framework
SC_Info
Cordova.v4.supp
Cordova.supp
Cordova.v5.supf
Cordova.supf
_CodeSignature
CodeResources
Info.plist
PrivacyInfo.xcprivacy
Capacitor.framework
native-bridge.js
SC_Info
Capacitor.v5.supf
Capacitor.supf
Capacitor.v4.supp
Capacitor.supp
_CodeSignature
CodeResources
Capacitor
Info.plist
PrivacyInfo.xcprivacy
Info.plist
capacitor.config.json
Assets.car
AppIcon60x60@2x.png
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙