Suspicious
Suspect

d03543c99e7baeb65211c7ef13edb3ab

ZIP Archive
MD5: d03543c99e7baeb65211c7ef13edb3ab
Size: 530.77 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d03543c99e7baeb65211c7ef13edb3ab
Sha1 9d6d8cd994ec170fe91bb7ebda2d928ee3f5b283
Sha256 f98e51dc19c82a35fd3e7d9629863690d85596c8ce5d3b28cb81d97a2cb1ee52
Sha384 2263858fb859548b1731e7bb6f12386726c97aeebd6bfb3925762ef732b976bcb3e587642da7073e00d952a8425cbd51
Sha512 302e757b4ab3dd0fb78902062ef8eaa671ca51e5a948e4efb2c20e4c21a003f02ebf950eef37ab1c9d960eef9732cce1a4d5ee20ba6a96594f6ee6f865cad99e
SSDeep 12288:3jXlNMiiXBZTvViRziobl9jcr91+rTY3r8qSfUhurk:TXR2BZj0RLbl2rKY3IR8Mk
TLSH 2FB423856C682B73F541F98C1AC4342CD4202C3B9AB762DC5E8844D3647FB66BD6A9CB
Launcher.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Launcher.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙