Malicious
Malicious

d9ce2222ca6945f6bc51af5aa57b0b6f

Share on LinkedIn
Print
ZIP Archive
MD5: d9ce2222ca6945f6bc51af5aa57b0b6f
Size: 1.83 MB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 d9ce2222ca6945f6bc51af5aa57b0b6f
Sha1 e136c08beb78a4fb4b5c93f735cfee583797cd27
Sha256 da22fa6584627568bbee2501b5b58d2d53f766a2dcf7fc75abb5fdb8beee68bd
Sha384 cc200588f5dea347934b9b0d4301974c5ae23a47924d2a1821de369fd608d9e29ccd0ca4d8d761757dbfe1a5f0befefe
Sha512 39e80de8ad4437cf4f7f503678e6313d2cbac8a35a0359352f6c8d35d0a0053db64dad55ff3f52644c96d15261a70e244b8834825809b0d5590f690f364a46ea
SSDeep 49152:vfAYc3QBFwHJeWrZjHfhzqVtQuMSgFnKWqL0:v4D3QBFwpeKjUnQuTgFPqL0
TLSH 598533A6CD091604886E7F76E57F81C6BA773E92B30C1F644EE345147EDAE847ECA810
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.fptable
.rsrc
.reloc
Resources
RT_RCDATA
ID:0835
ID:0
ID:1033
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
fothk
.rdata
.data
.pdata
.rsrc
.reloc
Resources
MUI
ID:0001
ID:1033
REGISTRY
ID:0065
ID:1033
ID:0066
ID:1033
WEVT_TEMPLATE
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
ID:0006
ID:1033
ID:0007
ID:1033
ID:0008
ID:1033
ID:0009
ID:1033
ID:000A
ID:1033
ID:000B
ID:1033
ID:000C
ID:1033
ID:000D
ID:1033
ID:000E
ID:1033
ID:000F
ID:1033
RT_GROUP_CURSOR4
ID:0067
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
SAMA-Kba2809_092926p9uc.bat
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>scr:ps1~T1027~T1059.001
Shape arc:zip>scr:ps1
malicious 2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙