Suspicious
Suspect

ef6b8175b450de59ae75c1477a469879

Share on LinkedIn
Print
ZIP Archive
MD5: ef6b8175b450de59ae75c1477a469879
Size: 492.54 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ef6b8175b450de59ae75c1477a469879
Sha1 8d933df570e4360ed658c4282385c4d74707f50c
Sha256 6ace604a850e29c4051326a137c50e83713eec0051db142d30a9594d009eeb21
Sha384 4804e9dd0cee27dbaad1a1f36bb46233f662785b9b302e5cb70b23cd86bda4546cd1697527cd3a4fd4770d85e88bd081
Sha512 8377093b3e6f5c124af9d284d04ed1b373c12abc24edd0dde383e9f755661c1e18f3e26efa82d1f1fd629fe034155094b89c765db6b664dfee8199a0cf77b9a8
SSDeep 12288:+sS5lyFd6p+6sVXkvgSe5yDqr++rVOje+yH5S:+sgxA6sSvPWy+6eTH5S
TLSH 14A42397E39996EC8CC47ABA8B2C0D08B27CE7745CCF06A8537E5335D1688A39E0751D
Launcher.bat
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
proto.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙