Suspicious
Suspect

d76fed66a9c63aa86adb6be3ea9405d2

ZIP Archive
MD5: d76fed66a9c63aa86adb6be3ea9405d2
Size: 587.69 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d76fed66a9c63aa86adb6be3ea9405d2
Sha1 18fe0a54ddcfda11ce523d757d9b9cf63b6530b9
Sha256 ed64da4c781f5cc39f1e8e775ea1333067a6fdfe74f0a1dea2031b13cc9462c7
Sha384 50c3b123b7dbae48c99155eb9f94b1b68356a4f881be4c7402291260d4b9b0b7a8c572c796d67ea9819a5b8db564d3a2
Sha512 2f61210cf709b0cd9e1390eced596da7c964e27e1c76dc0da5173fb39293ec51fabf3c050ec539e0e055e7a2fb0d23c660fea526fcaff3e8ca76a96337818cc8
SSDeep 12288:z+A7qlRP8eHTCW+TNYOONPTi1wCgU3EOsT9vL2bymH9I1P0QKw6FEc:z+QqldA/TSO713u7xnmH9IaQKH1
TLSH F0C4238BA3FD845390BF1F58AA5BB48D091976F34732DC93146A3213D9CB323B752698
Launcher.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Launcher.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙