Deep Malware Analysis of 0872c30797fa4f60d88285d4b765c7a0 | md5: 0872c30797fa4f60d88285d4b765c7a0 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	0872c30797fa4f60d88285d4b765c7a0
Sha1	5e2254ac90c0ebc72e0d08fb92ec0cb53505eeb0
Sha256	b1886331236b03a1527ccf95dbb81ad9bfb7e73029887f7bcb26d6d6fdc01034
Sha384	be33b3b23d90c1fad217e6da35b8afaa35735dff085521e2037dae9d24e4258886f30274a810a67f404015c4f848ab73
Sha512	b50d89756dc0553e2f46b410290fb2af3e46697b50baaa744c37bedb127fda24a43f87922236f9c4b062ccef60c4f158cfe98f49b5352368b9fe291d6b7d7290
SSDeep	393216:v55iH+qyC2GSoG6LekMzbVHX3Hm/belgL4hbjCwfaty7MVbQ0OSs:v5oeqGG9ekCbVHXCoNbePc7D
TLSH	33173310910C9AE7EC2B11B3A9D32B0A2D653F50FE34F8E87752D33B4E06D9E5475A62

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 1secondary ignored: 7

bin 5img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>pe:dll>pe:rsrc>html

Shape arc:zip>pe:dll>pe:rsrc>html

4 nodes