Suspicious
Suspect

f4b9a336a9309b9bb958f81bad109ae8

Tar Archive
MD5: f4b9a336a9309b9bb958f81bad109ae8
Size: 675.84 KB
application/x-tar

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Tar archive
Size
675.84 KB · 675,840 B
First seen
2026-10-14 15:45 · 11 days ago
Last seen
2026-10-14 15:45 · 11 days ago
Last analysis
2026-10-14 15:46 · 11 days ago
Hashes
MD5 f4b9a336a9309b9bb958f81bad109ae8 Sha1 5db4f438b8ca0d942af7ea1c7ced5ec2f20fb21a Sha256 cfa448e18fec4192ac629071970261cf0f9668937f5226fd80884b11747c9ecb Sha384 526390b3e60bcaf8b4554d89d695a64f57f200e5d34d21de28659f960350071548b2c4085e012dcbe9ea6d1648510ed1 Sha512 1e0f0ce90414ad4685c3dae5fb7d86fa80871751641cd075bba10b69e1055130e3724dd69302d1486d93a21d32239d50b8e1e119be9d23bf32e1a2f9748f41fd SSDeep 12288:a+wtj0DvOvnbGVFDot103R68rzqvy30NkS9fmwg+yeNGhhZ6na:a+IIGvnSc23JzhQkS9xmeghZD TLSH 27E423256DA0EDFBFCB00734087348629EB5592915D2864F03D0D79CBDF2692DE8AAF1
34 files
TARf4b9a336a9309b9bb958f81bad109ae8
NSIS004922_MT103_001_rejection_000223376.exe
Structure
P7B[Authenticode]_8ea5a30d.p7b
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINRT_DIALOG
BINID:0069
BINID:1033
BINID:006A
BINID:1033
BINID:006B
BINID:1033
BINID:006F
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0067
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
BIN[NSIS Installer] @ #00026E08
BINAnglofilernes
IMGBigamist188.jpg
IMGBigamist188.jpg-preview.png
TEJDrifter.tej
TXTdisponenter.txt
STAmejslingers.sta
INIrewoke.ini
INIudloebs.ini
IMGunactivity.jpg
IMGunactivity.jpg-preview.png
DLLSystem.dll
Structure
NSI][SETUP_DECOMPILED.NSI]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3
bin 2img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:tar>pe:exe>pe:dll
Shape arc:tar>pe:exe>pe:dll
3 nodes
34 files
TARf4b9a336a9309b9bb958f81bad109ae8
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙