Suspicious
Suspect

ee95af79af9582b3f12595e2341c6e3c

ZIP Archive
MD5: ee95af79af9582b3f12595e2341c6e3c
Size: 517.08 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ee95af79af9582b3f12595e2341c6e3c
Sha1 d0dc3820ac4b1a78ea803c3643fe43cfa0bba1a7
Sha256 bb9b9dc0d3628de64b7aa7af8ffda2ab6a16fe9a925aca7f046a96c8f718120c
Sha384 454034834d98da519bd5efa136f65e99a02e5d5f642cf7b0a78668bc4b6ea9db5e5a188084d2fe1a1a5469d0f5b85122
Sha512 25432e514d1d8b9621cbbb1552dc1b7519a8202daa0230d87a7cf97ac789782739b8982c2159a7382321cf7778e5c4ec84e66153ded51347e907c944e2f84641
SSDeep 12288:BGRl4nbDDGIabs/7iiEVwYg2l3/2NHHy+wK8t:tTabs/7iiWw0KSxt
TLSH ABB423CE5A286CAC5BE85E834F5DBFDA2CF8413F862411F3F3581A14D4C956672A810F
Launch.bat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Launch.bat
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.reloc
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙