Malicious
Malicious

e0bb6f28c5fc99278453846147f08d69

ZIP Archive
MD5: e0bb6f28c5fc99278453846147f08d69
Size: 966.97 KB
application/zip
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e0bb6f28c5fc99278453846147f08d69
Sha1 9774eaf1778f91ffd97e03a7a50251a2380ad213
Sha256 e804b686d3f02c442480de23cac71be5d3c35db6acfdcb3ef2a032c68a2b5978
Sha384 e7d5da7e610533fc8d3f802fd3b031fe6a546fad02afe00511f4f17a06c91959905abc65949eb230789025faabc8800a
Sha512 86438d18982038034b7d6945740ad35306c12fad53c3abcfb2edec8ac809fba1991bc793c3ea4cfb407b37564a8669f8f694eba6aee52130911ff4e445f2d304
SSDeep 24576:jIrjQI2/eQmMhGWk3VGWfQq9os7eLtk78Ri9MfLzo5wkn:UvQI2/eQDGX3VGkD9LytkARnIZn
TLSH DE253309F0963994D23FE63766D055F888F32D7F441EC78B2B9207D5E8B657229F8A20
e0bb6f28c5fc99278453846147f08d69
Malicious
Ticari Hesap ™zetiniz.js
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>scr:ps1~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape arc:zip>scr:ps1>arc:gz>scr:ps1
malicious 4 nodes
e0bb6f28c5fc99278453846147f08d69
Malicious
Ticari Hesap ™zetiniz.js
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙