Suspicious
Suspect

ebe632d4204569eff659d292fc761283

ZIP Archive
MD5: ebe632d4204569eff659d292fc761283
Size: 542.16 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ebe632d4204569eff659d292fc761283
Sha1 a76310c34a44a0078784d33ac0b0c899b1b76f45
Sha256 b8133e621be2e1e8e8953156871fa825cb9cf37e4a02fb70eb28927004e2afb0
Sha384 d9be66248c068566de2f89be0cefd51a9409cb558733846db43fd1971773b7d929051bf572025cd8162bba5fa2b99de5
Sha512 d36b3a909e5076128188c4939f4c70d5f0aa03b7537c74e9e310552802d6147aabd5f11be422fb31e8ce2e2531dd94800927ad01d15090350b65bb2adf6119a9
SSDeep 12288:A7JZAaFpeLqO3g/ALyYG0ZaDajTCXMO8xzDOe3Wk:cLpePA/f0Za6TCXKBxmk
TLSH 94B42369227F71500C7543A94B468124FC3E5EB2AE00DD93EDDCAB4D8F5BB199638E0E
bytecode.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Launcher.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
bytecode.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Launcher.cmd
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙