Suspicious
Suspect

f7c3dc586f6339932a6d2503eb6c4a9e

ZIP Archive
MD5: f7c3dc586f6339932a6d2503eb6c4a9e
Size: 492.54 KB
application/zip

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 f7c3dc586f6339932a6d2503eb6c4a9e
Sha1 96ab683710bcb0243c1f8ed63c5ff000737de99a
Sha256 b521b48cd964a8e6588e697779a8ec48536ce1ffdfdef65bbb9423b1843d22b5
Sha384 e4d34a0322b53a16aa20e94d57c86cc7fb8b1c731f702828af907d52764a08eee8f1c9483817130a99c955aaa178360b
Sha512 abd1082183c588e368abb55eca1aff40e0da3bdaa10a714256c6e8270e442040532cb048b98690760df326cf3aa99f011911c9a1fd8e6284d80a04d9ded33661
SSDeep 12288:WsS5lyFd6y+6sVXkvgSe5yMqr++rVOje+yH58:WsgxT6sSvPTy+6eTH58
TLSH 73A42397E39996EC88C47ABB8B2C0D08B27CE7745CCF06A8537E5335D1688A29E0751D
Launcher.bat
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
proto.txt
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path arc:zip>pe:dll
Shape arc:zip>pe:dll
2 nodes
Path arc:zip>pe:exe
Shape arc:zip>pe:exe
2 nodes
Launcher.bat
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.reloc
proto.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙