Malicious
ZIP Archive
MD5: f34996cc1f44c98729ef6ce92d05e41c
Size: 11.1 MB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | f34996cc1f44c98729ef6ce92d05e41c |
| Sha1 | 91140593e10492b38a3c089fcd7943f3f268a5de |
| Sha256 | 615861fb801e8b04c847598db4e1e46e4b046295017caa37cb5486dde72b5865 |
| Sha384 | d4399fe63e4717c213c41801d847a3aa27aeac2c157866cf6ba3ec26171f4342fac7989eb1924d320dbd4c3f30d7d6ea |
| Sha512 | 687f4c11c5023eedd5c48f3b5c3b0ae90822c5406b9b3a7fb11ca7334bebee21405c14c019c3bafb54e60a84d987d82c103926e8273be5cc914268ada4deb956 |
| SSDeep | 196608:+K6kmLhoon8UWVDxxaniXA4m9ZCrnNfqMD2Tb1TRkp2v5atKmRLmpjNM1tdSV+m2:KL686onie+f2tTRkpc8tRfzUV+l |
| TLSH | B5B63372C1744FE2C26D80764B317A461711EA6194C9CF19CDAE95F70C3A9FA4B32A8F |
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 10
STICH kept: 3secondary ignored: 7
bin
6img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>arc:zip>scr:vbs~T1059.005
Shape
arc:zip>arc:zip>scr:vbs
technique3 nodes
Path
arc:zip>arc:zip>html
Shape
arc:zip>arc:zip>html
3 nodes
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential