Suspicious
Suspect

f7440cf3223d8aed1cea5c179d0c1574

ZIP Archive
MD5: f7440cf3223d8aed1cea5c179d0c1574
Size: 6.97 MB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f7440cf3223d8aed1cea5c179d0c1574
Sha1 520c344d36f7cf67f45c5f1449de15d333601e31
Sha256 c80debfcc13b6b9dc675b48154f331cfa9aba5af149d3899a9f23a1e09cdc64a
Sha384 e6b9c4aab84a16b05e482bfa10658ba07b20d5785493f97d8ad60a5e6efe8868fcee10a8ae12e03cf375f272abfc44d2
Sha512 85cc2c83fd9df694290fa29e76e3bfe5bf28dd8b1564abe8856a9784d3369f6048fb08928fc53038c576848a4c03aed77cd3aa703137710ef57101ad38443126
SSDeep 196608:mvHtFqY0gQpmoZvQQntcZLUWo3Q2j6ZH8wJ2mtRDAO721:6HtbLHQntc+ZQ22l8m2mzBK
TLSH 1666334BBEC1370CF43DC9B4B8FF61E8E05592539111E7AA0792AA4421757C8DB2AFC9
f7440cf3223d8aed1cea5c179d0c1574
res
9Q.webp-preview.png
iE.webp-preview.png
j_.webp-preview.png
Cx.jpg-preview.png
Nt.webp-preview.png
13.webp-preview.png
5c.webp-preview.png
-6.webp-preview.png
d2.webp-preview.png
sK.webp-preview.png
fq.webp-preview.png
MO.webp-preview.png
yw.webp-preview.png
u5.webp-preview.png
Sn.webp-preview.png
qs.webp-preview.png
META-INF
androidx.lifecycle_lifecycle-viewmodel-savedstate.version
androidx.compose.foundation_foundation-layout.version
androidx.activity_activity.version
androidx.compose.material3_material3.version
androidx.lifecycle_lifecycle-runtime.version
androidx.lifecycle_lifecycle-livedata-core.version
androidx.profileinstaller_profileinstaller.version
androidx.interpolator_interpolator.version
kotlinx_coroutines_android.version
com
android
build
gradle
app-metadata.properties
androidx.lifecycle_lifecycle-viewmodel.version
version-control-info.textproto
services
androidx.lifecycle_lifecycle-process.version
androidx.core_core-ktx.version
androidx.startup_startup-runtime.version
androidx.annotation_annotation-experimental.version
androidx.arch.core_core-runtime.version
androidx.lifecycle_lifecycle-runtime-ktx.version
androidx.lifecycle_lifecycle-viewmodel-ktx.version
MANIFEST.MF
kotlin
reflect
reflect.kotlin_builtins
coroutines
coroutines.kotlin_builtins
collections
collections.kotlin_builtins
internal
internal.kotlin_builtins
kotlin.kotlin_builtins
ranges
ranges.kotlin_builtins
annotation
annotation.kotlin_builtins
resources.arsc
DebugProbesKt.bin
assets
dexopt
baseline.profm
baseline.prof
protected_by_np
ApkDex2c_0aba869bc99b427daf16ae5183916393.txt
kotlin-tooling-metadata.json
classes.dex
AndroidManifest.xml
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 2secondary ignored: 2
bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>arc:zip
Shape arc:zip>arc:zip
2 nodes
Path arc:zip>elf
Shape arc:zip>elf
2 nodes
f7440cf3223d8aed1cea5c179d0c1574
res
9Q.webp-preview.png
iE.webp-preview.png
j_.webp-preview.png
Cx.jpg-preview.png
Nt.webp-preview.png
13.webp-preview.png
5c.webp-preview.png
-6.webp-preview.png
d2.webp-preview.png
sK.webp-preview.png
fq.webp-preview.png
MO.webp-preview.png
yw.webp-preview.png
u5.webp-preview.png
Sn.webp-preview.png
qs.webp-preview.png
META-INF
androidx.lifecycle_lifecycle-viewmodel-savedstate.version
androidx.compose.foundation_foundation-layout.version
androidx.activity_activity.version
androidx.compose.material3_material3.version
androidx.lifecycle_lifecycle-runtime.version
androidx.lifecycle_lifecycle-livedata-core.version
androidx.profileinstaller_profileinstaller.version
androidx.interpolator_interpolator.version
kotlinx_coroutines_android.version
com
android
build
gradle
app-metadata.properties
androidx.lifecycle_lifecycle-viewmodel.version
version-control-info.textproto
services
androidx.lifecycle_lifecycle-process.version
androidx.core_core-ktx.version
androidx.startup_startup-runtime.version
androidx.annotation_annotation-experimental.version
androidx.arch.core_core-runtime.version
androidx.lifecycle_lifecycle-runtime-ktx.version
androidx.lifecycle_lifecycle-viewmodel-ktx.version
MANIFEST.MF
kotlin
reflect
reflect.kotlin_builtins
coroutines
coroutines.kotlin_builtins
collections
collections.kotlin_builtins
internal
internal.kotlin_builtins
kotlin.kotlin_builtins
ranges
ranges.kotlin_builtins
annotation
annotation.kotlin_builtins
resources.arsc
DebugProbesKt.bin
assets
dexopt
baseline.profm
baseline.prof
protected_by_np
ApkDex2c_0aba869bc99b427daf16ae5183916393.txt
kotlin-tooling-metadata.json
classes.dex
AndroidManifest.xml
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙