Suspicious
Suspect

dd935a44725605b4df792ecc99c30630

GZIP Archive
MD5: dd935a44725605b4df792ecc99c30630
Size: 15.11 MB
application/gzip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 dd935a44725605b4df792ecc99c30630
Sha1 5878d2a5b4b50fa1ee03e1479fb45bb6a9ed8659
Sha256 b24813aa304464c2463d52dc2d2da13774bb44ddd6bfe3fb4d6c9dabf1948e9b
Sha384 05d27246539e2d93fcf2fe5b1ee683f7a74b6488c94932718fa1ff0fd6bcdf6e7283f56ad71eecab475977e1e458ddb3
Sha512 001e5a6e28835c77bfa4cf3bd602d708079275e6a3ad221bd24bce47e5e7c0f030222e73560bbe5eef385d1cc6b65ed767161301cb00183ece7ad8e8a2ee8440
SSDeep 393216:CUWoecenr4O2n22/n4fG0WlXUu+pjhYqCujS5sqR+KmU:CToejMO2n26nUG02XUpmsK+KL
TLSH 20E633A1A7491C46F66FE720BD131CE57AEA306A8E8274C22603505F2FDF5C8435DDEA
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:gz>arc:tar>elf
Shape arc:gz>arc:tar>elf
3 nodes
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙