Deep Malware Analysis of 148567f084c7da77d70c04aa3de5f743 | md5: 148567f084c7da77d70c04aa3de5f743 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	148567f084c7da77d70c04aa3de5f743
Sha1	8c6f7cecda95572e943423324c3c4cd32a1c4cad
Sha256	fffe8b9b871cce16a08513abdff1b9b76f7f830cae6a8499a11b335377922dd0
Sha384	9a784e49c29465b21102153d04c11768f6181dd3679b5790d98dc9732079b78a1314c50ac92c75d3e70520d63bf9c401
Sha512	c4b84bfbb1bd9bfa86ac0f423312ecd2a3db4eaff6fd1193cefe408c3254450dfd371f0fefa787c043a8bad14b1cd5bfde4d222b66638ae10ff1b5d34ccb756f
SSDeep	12288:rclSCDe0U+m1V6ECbniSPfS3e2R3feeintFckY:WDe0wUTiSWzeeiY
TLSH	C4A4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes