Suspicious
Suspect

da9f8af404a122b2fff59a5e25f6d57c

ZIP Archive
MD5: da9f8af404a122b2fff59a5e25f6d57c
Size: 585.38 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 da9f8af404a122b2fff59a5e25f6d57c
Sha1 a027bee980fd53084b27f76139408faad43e048e
Sha256 da19d8708e68b90c1524bf34c420ffd30cde537e536ccbde00492373b39be375
Sha384 de8e43c1577bd651c94eefe13e9c8a7cf4e9fc29c0d7e009d5e3e1f6436d1ca3847de6c2896fb76cb574ad2ab7e462d9
Sha512 db96f13bce54288dc7505882041a8a7a7220be77d49645a10280c7428185b634d9a808d8afb1c145fd6a680691f3dfa96404848b6892e2cb9fdc703045b85d2b
SSDeep 12288:+devMEkFmHkO6wlOMWROC/FTeHo22Qm7NzofOrAHmM:yemu4MQOC/gHozN7NzomMV
TLSH AEC423195942D2CE83D43F7E8EC0BBA03E7990EBEB0DFA0416DA35917C95251B3D492B
Application.cmd
package.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
package.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙