Deep Malware Analysis of 0e8aa4390ac8f7613516e97e565f9803 | md5: 0e8aa4390ac8f7613516e97e565f9803 | Office Document | CAB:COMPRESSION:MSZIP | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump) | PE File Layout

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	0e8aa4390ac8f7613516e97e565f9803
Sha1	f7a1f6078721be064d015bf174d2a7f68892e552
Sha256	761a9ce0ded48ae058a4e7354b496c1c9b880852c255e1e4bbcf2ca2dec354d6
Sha384	72e9749e669694e3f3e3bd756dd89198512716fa3e69734664e2b1d50fcb7cbdb93088d905d5916ad350b3af723c3f5c
Sha512	1f6d69b3e77ec3bfa83e95d27561e8358385969b66fb650810aa9a4f7b86863c7a2ff2d6591081de281d51f70544add27700929499948380e681d02f3ea54b37
SSDeep	768:ZtQY40KmSPQRzfyRWwWr44oVZkeInZ17reWMmCdeWMmC:/40KmpoEs4SZkpomSom
TLSH	7D338D573208D332C54117318A6BA7E99F6A6C5CCF335916324BB34C2E77AD0667BAE0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>pe:exe

Shape ole:doc>pe:exe

2 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential