Malicious
ZIP Archive
MD5: f7fbed8735964ec0c599fa142e942163
Size: 1.28 KB
application/zip
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | f7fbed8735964ec0c599fa142e942163 |
| Sha1 | fa3704d9bb18fb0e480c7313d015608f52005375 |
| Sha256 | 7400f7aac37cda0c5d39195928cd89a48039ae12a4910260b2acbef79cb20997 |
| Sha384 | ee82554a9de74eee854b5cb369f17624b508fdf548c9be848821e249c6b6d834e046f0bf2fa30189ba4de62d2a2faf4c |
| Sha512 | 8547f6f61fd56d7b2d7d556dd806b57fa1b2b80b89537816d5fa6bd9f03d5e9809df2e3f2190e0bfdb20c616f505c15fc68b615e35f66876c5df21f4be3fcaff |
| SSDeep | 24:9oDghrS2SkdC7uRQg5FRDpZnFcmScWH5G3Adj3:9oIrrSkEWQgdFcPmST |
| TLSH | 6321B7D9482DCD96C6268EBB5E22490621386446570062A1F38FAAF12DCE14C726A364 |
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:zip>lnk~T1059.001~T1059.003~T1202~T1204.002>lnk:cmd>scr:ps1~T1027~T1059.001
Shape
arc:zip>lnk>lnk:cmd>scr:ps1
malicious
4 nodes
Path
arc:zip>lnk
Shape
arc:zip>lnk
2 nodes
LNK: Command Execution
UNKNWOWNmalicious
%COMSPhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
$usfx6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential