Malicious
GZIP Archive
MD5: df1a7fa802dfce046d909639984dc5a2
Size: 7.87 MB
application/gzip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | df1a7fa802dfce046d909639984dc5a2 |
| Sha1 | 2bebc80ad110557f7345536c8b69db06f9f009d4 |
| Sha256 | 60949961bef062ec8fc2b811c3b64a045865b7161d10489fa73889d2e8654899 |
| Sha384 | 28c3fcb5371b218fefbf90a8f6118bb960f1621dcb21c15b94b6c03f9a6b419a5f6e0506ffcc37b551b6ea1b3cb7a75c |
| Sha512 | 914778cbef7b6351ee9c075479fbeaea5bbbb5570106497c751a4ceab080f1a137e7c084bb7ddb154aba9a0d83c6b6238c48331a326874f5a998cb838591e9d7 |
| SSDeep | 196608:BBB7xxIpMeZur5GAf+lWGClM4b74ohEEaD/c:9w1ZKjGClM47yc |
| TLSH | 0C8633DC6CFCEA0AB162DF3F2FBE37956350E4145276492DED62AE8150DD0686DB2C80 |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 3secondary ignored: 7
bin
6img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:gz>arc:tar>arc:zip>scr:vbs~T1059.005
Shape
arc:gz>arc:tar>arc:zip>scr:vbs
technique4 nodes
Path
arc:gz>arc:tar>arc:zip>html
Shape
arc:gz>arc:tar>arc:zip>html
4 nodes
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential