Suspicious
Suspect

e0e9bfacf50d5e1d609dff67b158f6b7

ZIP Archive
MD5: e0e9bfacf50d5e1d609dff67b158f6b7
Size: 584.48 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e0e9bfacf50d5e1d609dff67b158f6b7
Sha1 f77c7edccdf22a1736303bde039f7405b29932dc
Sha256 a1eef2d3c71b5ee1c004509778586127973ba14f048eeb69c2cdb77b187c4c3c
Sha384 8231c2467565fa0c7b84c4b443cbca3cc3eb2b4ab61957342cfd22a3a811a1e7b42caa5f6c35b72e7bf3e6a34372a3e4
Sha512 b9bc1f29f6d2f205dd3c53e3d6c171c125937e15be5e37bbb9fbbafb9b649bfbdda4b545531be1cbbdd8954e4e773d34029aa79b4373cd4599d5595e170a28fb
SSDeep 12288:b6wlOMWROC/FTeHo22Qm7NzofOr68mCeA924EwCo:D4MQOC/gHozN7NzomW88A9n
TLSH 70C42304340641D5835A2B1EAEC4E7E0BEB560DBFA1CF940AADD7ED06DE92A177C1837
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Application.cmd
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
dynasm.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙