Malicious
ZIP Archive
MD5: ccd682c7621e7706bd224836ed23c9c9
Size: 3.24 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
ZIP archive
Size
3.24 MB · 3,237,993 B
First seen
2026-09-07 20:00 · one month ago
Last seen
2026-09-07 20:00 · one month ago
Last analysis
2026-09-07 20:00 · one month ago
Hashes
MD5
ccd682c7621e7706bd224836ed23c9c9
Sha1
c05080232166fc1f5f61b66c3e7848d07b523891
Sha256
399f5e0c17c6fd90d794e0bc59c918165d6c98f59ec66e247736099a07863b21
Sha384
adb0d93ee65698f3d038f11655304e1ff70ebe4124ec58982f5360b7f1e4a48386e5fb51aa22a70c45b6a9ded770e436
Sha512
b8b89c6e28e811be39f55711ee0952e9ea974a573e1a4da9bca95d3bc4d0a07b14d93481be5355e6ecfe42a748865bd37a45eaf27127664bbba857b5a3cd9684
SSDeep
98304:MfaA0EgrTBtc0PI/LvAecqB1rXsuoZDyC:MaBNUvaqXsuG
TLSH
C9E533B81A0E3E9AD8BCF1707DA05EBB575C409D97660E33B4C126E9F67A4004793BD2
7 malicious · 700 files
ZIPccd682c7621e7706bd224836ed23c9c9T1027 · T1059.001
BINreg
BINrserver30
BINx64
BINx86
PS11.batT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS111.batT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 7
STICH kept: 2secondary ignored: 5
bin
5Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>scr:ps1~T1027~T1059.001
Shape
arc:zip>scr:ps1
malicious
2 nodes
Path
arc:zip>pe:dll
Shape
arc:zip>pe:dll
2 nodes