Malicious
Malicious

d80264792bda704ca8eddac6a94654dd

Share on LinkedIn
Print
ZIP Archive
MD5: d80264792bda704ca8eddac6a94654dd
Size: 1.47 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d80264792bda704ca8eddac6a94654dd
Sha1 5c51f99c86c0bcd6b0cd9ba4e533c3e3ddcd9401
Sha256 2ea2ab216b5e157d55e0dd2d8a229adda6b4507c1b1d72bf12f7879e864718b6
Sha384 30de00a3fd1d82c6bea501addf9924fbf5ad1c5f6e05eb609db3c1c57e18bdb9e4a18e3f93a5b5b5eef62a00ac9e69fa
Sha512 b8c8a1194e24f6e12ef3446a12afb2f364070755fd6ddec1502970abddeef5d2c5b33eab3487d9ba4b0f6b05401363e76a7e1bae5a79cf33ab7e90abc70e3fec
SSDeep 12288:/Uw2A9/MtXXYPSKGSfznXdQtnZSYs8e9+zrWWLCLCeak0+4ldrAjzoyD+1Sr:/UTA94dFmLXdQl9s8lf37ej0+T/9iS
TLSH E0657018978AE5FBC09D0174225F8BAF7A71818E47A08206D722DC6E2DD7FD47F60E16
[Authenticode]_56708382.p7b
Overlay_c370f406.bin
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.data
.rdata
.bss
.idata
.CRT
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1024
ID:0002
ID:1024
ID:0003
ID:1024
ID:0004
ID:1024
ID:0005
ID:1024
ID:0006
ID:1024
ID:0007
ID:1024
ID:0008
ID:1024
ID:0009
ID:1024
ID:000A
ID:1024
ID:000B
ID:1024
ID:1024-preview.png
ID:000C
ID:1024
ID:000D
ID:1024
ID:000E
ID:1024
ID:000F
ID:1024
ID:0010
ID:1024
RT_GROUP_CURSOR4
ID:0000
ID:1024
RT_MANIFEST
ID:0001
ID:0
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path arc:zip>pe:exe>pe:rsrc>bin
Shape arc:zip>pe:exe>pe:rsrc>bin
malicious 4 nodes
Path arc:zip>pe:exe>pe:rsrc>img
Shape arc:zip>pe:exe>pe:rsrc>img
malicious 4 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙