Malicious
ZIP Archive
MD5: f77acea0344aba66b8cd6e9078b87e3a
Size: 644 B
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | f77acea0344aba66b8cd6e9078b87e3a |
| Sha1 | 9c26a2bba76edf0891870dd1bdc7c786a2b43145 |
| Sha256 | 7f6fd336bcaf1c234ec7dece88d47eee9a29975359faddb87145a2c5d9541c73 |
| Sha384 | c8f8d3a4fe0673176c5896fd1b7335f2bf00fd4c14b1323aa35c11d17afb6eb09f97ddf2973cb740f039b78b8d564046 |
| Sha512 | 0093258040a796d1d008e78fedd35a4d17bea9a54426e26a06921d1f4dba5658777a11e2b6f8986df883cbc8fecf280facbb212d72841b93d0e87e34ace35a40 |
| SSDeep | 12:5jsfYO1/8VZZOBoa5vzCPXRcyzm1O8Vwky1OYiAo4/DYJw4xoys7yYObdsm4cO8c:9sf98YoOveCyzmPmZjv/DYJJxE7y6mYt |
| TLSH | EFF0DDA1CE57F180EE85D13264141A0D13608F978309B9876B29380AF9C5AC4E3455E9 |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>scr:ps1
malicious
3 nodes
LNK: Command Execution
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"iex(ihuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential