Suspicious
Suspect

f685aa98d6258e290b9c4a205c7e6af8

ZIP Archive
MD5: f685aa98d6258e290b9c4a205c7e6af8
Size: 584.44 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f685aa98d6258e290b9c4a205c7e6af8
Sha1 476fd0c1a43b67c990e25f8c345eeedea7eac081
Sha256 739eb34a97e0459af4057083bd87a12945e7b348a980a81259529fca8b4a7cdc
Sha384 15fad30abc59191286f7b9921bbffcfb51d5cf1eeb4f0d09ce4eb3544f5b7ad8b07e52ea37685650bea6a187b5221b99
Sha512 4bdbbba7cb9083a35de45203d61d771ad5e1bfe71dc69f24e331b5e99a29be5770051ff13363cc04e957e4c14fea695fcfeb45775fc2b77e324250dd120cf788
SSDeep 12288:neElNtIBB2gX3U5KA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez8:neSIBBfHMm6Jj6ESfUxZ91kmY/9HeA
TLSH 9BC423B7179AB4897503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE247FB2009E
genlibbc.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
LaunchApp.cmd
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
genlibbc.txt
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
LaunchApp.cmd
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙