f60091cadcde21706b8999106ffbc4fd

ZIP Archive

MD5: f60091cadcde21706b8999106ffbc4fd

Size: 13.92 MB

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	f60091cadcde21706b8999106ffbc4fd
Sha1	6ada644a8f4a3756f03c507d9cff7e202072c80e
Sha256	e596237b4036cf7a055edb402aff1f5a07852d6e2276836996654a6056820ebf
Sha384	f1938de1373a31d53a78e9a74b3af64606dbee572083b0472f1601aeac35599510a77ffa9d131d74a95892ff7fb4ec5a
Sha512	99f8101081ef326cb954752c093d0a8bcd1addb9f01dc508c3c61dae786ae6af2b89a59ecaf801a3d4c4a187c674b1cc50ec8f4efd04dee729bb268479557777
SSDeep	393216:GBZ3WVKrG7wJNghOjM6Y+jXwzCEcH6G7WJ3eF:GBNbrG7wHdYxzCEcHRDF
TLSH	C1E633C6FF7E890405960784D73A4D3183E86E50BAE71896B8141708E6447FAFFA8ED7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>pe:exe>pe:rsrc>bin

Shape arc:zip>pe:exe>pe:rsrc>bin

malicious 4 nodes

Config. Field	Value
Config. Key (RC4)	4D-5A-huhuhuhuhuhuhuhuhuhuhu
Domains	Lhuhuhuhu
Password	Lhuhuhuhu
Host ID	Lhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Config. Field	Value
Config. Key (RC4)	4D-5A-huhuhuhuhuhuhuhuhuhuhu
Domains	Lhuhuhuhu
Password	Lhuhuhuhu
Host ID	Lhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

You must be signed in to view YARA rules.