Suspicious
Suspect

cbd216c8b52f4a163d2601e9e46faf65

Share on LinkedIn
Print
Rar Archive
MD5: cbd216c8b52f4a163d2601e9e46faf65
Size: 5.89 MB
application/vnd.rar

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 cbd216c8b52f4a163d2601e9e46faf65
Sha1 4d2b05c31db80cf06bc6445a6ce94a2726e33a76
Sha256 12ec7ba210bc2c6541cf9785c93eea4b32a430b2ce7f91e1f127489173c7cbec
Sha384 a4e81928ff7ed221711f1d31889e1539a8928ee75df6452255be3639e343348e5cc33997ee284d020d870c084d3de380
Sha512 852a93dab554268e780debf6ca38ce665e62ecdb9ef7929aae857181c287b18dd1a46e85c6aab0adb4dc4073bcb0f4997da6ca7fe1008d3b3022e5ca1ac59e10
SSDeep 98304:LTyJF/HyKSwWDiDPiWytKm4fvsWteIMF8Q+X3q/fG7bScoyz1mjtW3eju14Jyiv:LT2ZSCWODPiWsKmYM6QZOPo2C4uK1Iyg
TLSH 6B56334AE75D4D2AC6652DFD21C18052E0BB7286FCDA20DE4B4C7C1B9F47A4AD34D88B
cbd216c8b52f4a163d2601e9e46faf65
Payload
decrypt.day
App.app
AppIcon76x76@2x~ipad.png
Base.lproj
LaunchScreen.storyboardc
01J-lp-oVM-view-snD-IY-ifK.nib
UIViewController-01J-lp-oVM.nib
Info.plist
Main.storyboardc
UIViewController-BYZ-38-t0r.nib
Info.plist
SC_Info
App.v5.supf
App.v4.supp
Manifest.plist
_CodeSignature
CodeResources
config.xml
public
__next._tree.txt
_next
static
chunks
13gf99jywv7p7.js
232vlti9c_c11.js
12gta4qxzlq4x.js
048aw8br43ao7.js
1nq5_7dr_ainf.js
14mrh2-p_w84d.js
30bnjj6vgfscr.js
3c07g1p3zh2rx.js
2yby5hqarruph.js
0ihnq7a4noezq.js
2mu_lfzt0j-6j.js
0g5abbqb5po0e.js
05-c3ty_6dwfk.js
0z2ed_nqoa2xw.js
04slycgkz-vc4.js
1em672j_boty1.js
1eglloh0s_w8l.js
3n424-3g8yz2w.js
1zugp0sz-lja3.js
309imioo5wq2o.js
23m5rk4ugez5b.js
0cz1d0mv5g_q7.js
1_1ucwckdgibg.js
3pkcsovx90omn.js
1aa-x_yx9iw-w.js
1pcqlt5urf31m.js
0gk4suwq4fl66.js
1fzv0sfx6i4xf.js
1ccjbtagtx3fc.css
3e8wair0uyiaz.js
3i90lngu8euqa.js
27jktro2p5rq9.js
turbopack-23j0dd6o6emhl.js
Vrz2zIOTKjWyIP2fDdXjP
_buildManifest.js
_ssgManifest.js
_clientMiddlewareManifest.js
media
5f9d24ebef5d5292-s.19xuq3td7fwu_.woff2
0da9c7f357bd9d4d-s.1975l3y3401x_.woff2
6c55a692938ebbbc-s.1emuuracu50qd.woff2
a218039a3287bcfd-s.p.43zbiuwnnoiok.woff2
favicon.291fqrje7jvnu.ico
e2334d715941921e-s.p.3o_v2fun1jzxk.woff2
4e1c87b7aa9e2f2f-s.3o02-8iknf6dl.woff2
41e95f694c5c4549-s.2b_sldcwg6mn_.woff2
bdc7e24a509eb931-s.0ynx40_3oa9rk.woff2
dd14639a62c56cb2-s.0kda-l-rfpyyq.woff2
d0d9446e69c4847e-s.3h31fjnwrfycc.woff2
798ea22d9983e047-s.3go-kn2r40gie.woff2
47fe1b7cd6e6ed85-s.p.3bh2vc0w-r-ll.woff2
0a7740363b4d4863-s.3ji57o093q1kd.woff2
apple-icon.04g28lxvu06g1.png
apple-icon.04g28lxvu06g1.png-preview.png
8e6fa89aa22d24ec-s.p.2o7m9ogm38dql.woff2
icon.0xi62tsxng8yj.svg
icon.0xi62tsxng8yj.svg-preview.jpg
b59689b1142d37ce-s.p.1bk8_xp319hr4.woff2
3fd967fc5374d70a-s.42u1-lj4buy61.woff2
b53057dbf91a7acf-s.11ypmpdlzqdb_.woff2
hdri
__next._head.txt
settings
__next._tree.txt
__next._full.txt
__next._index.txt
__next.settings.__PAGE__.txt
__next.settings.txt
amin-face.webp
amin-face.webp-preview.png
climb
__next._tree.txt
__next.climb.__PAGE__.txt
__next._full.txt
privacy
__next._tree.txt
__next._head.txt
__next.privacy.__PAGE__.txt
__next._full.txt
climb-admin
__next._tree.txt
__next._full.txt
__next.climb-admin.__PAGE__.txt
hop
__next._tree.txt
__next.hop.__PAGE__.txt
__next._full.txt
file.svg-preview.jpg
delete
__next._tree.txt
__next._full.txt
__next.delete.__PAGE__.txt
cordova.js
__next._full.txt
rules.txt
login.txt
admin
__next._tree.txt
reveal
__next._tree.txt
preview.html
__next.admin.reveal.__PAGE__.txt
__next._full.txt
preview.txt
preview
__next.admin.reveal.preview.__PAGE__.txt
__next._tree.txt
__next._full.txt
__next.admin.__PAGE__.txt
models
LICENSE.md
xcr
char
chicken
0.png-preview.png
env
lily_pad
0.png-preview.png
tree_1
0.png-preview.png
tree_0
0.png-preview.png
log
0.png-preview.png
tree_2
0.png-preview.png
boulder_0
0.png-preview.png
boulder_1
0.png-preview.png
tree_3
0.png-preview.png
vehicles
green_car
0.png-preview.png
orange_car
0.png-preview.png
purple_car
0.png-preview.png
train_back
0.png-preview.png
police_car
0.png-preview.png
train_middle
0.png-preview.png
blue_truck
0.png-preview.png
red_truck
0.png-preview.png
blue_car
0.png-preview.png
taxi
0.png-preview.png
train_front
0.png-preview.png
sounds
cashout.mp3
run
step2.ogg
step1.ogg
pickup.ogg
death.ogg
stumble.ogg
climb-admin.html
__next.__PAGE__.txt
vercel.svg
vercel.svg-preview.jpg
next.svg-preview.jpg
rules
__next._tree.txt
__next._head.txt
__next.rules.__PAGE__.txt
_not-found
__next._tree.txt
__next._head.txt
__next._not-found.__PAGE__.txt
__next._full.txt
previews
hop.webp-preview.png
stack.webp
stack.webp-preview.png
climb.webp
climb.webp-preview.png
stack
__next.stack.__PAGE__.txt
__next._tree.txt
__next._full.txt
settings.html
globe.svg
globe.svg-preview.jpg
window.svg
window.svg-preview.jpg
login
__next._tree.txt
__next.login.__PAGE__.txt
prizes
airpods.webp
airpods.webp-preview.png
gamingpc.webp
gamingpc.webp-preview.png
monitor.webp
monitor.webp-preview.png
applewatch.webp
applewatch.webp-preview.png
privacy.html
stack.html
0x00001DE0.svg
0x00001DE0.svg-preview.jpg
Frameworks
Cordova.framework
SC_Info
Cordova.v4.supp
Cordova.supp
Cordova.v5.supf
Cordova.supf
_CodeSignature
CodeResources
Info.plist
PrivacyInfo.xcprivacy
Capacitor.framework
native-bridge.js
SC_Info
Capacitor.v5.supf
Capacitor.supf
Capacitor.v4.supp
Capacitor.supp
_CodeSignature
CodeResources
Capacitor
Info.plist
PrivacyInfo.xcprivacy
Info.plist
capacitor.config.json
Assets.car
AppIcon60x60@2x.png
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
img 2bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:rar>arc:zip>html
Shape arc:rar>arc:zip>html
3 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙