Deep Malware Analysis of 1532b7c0e95e4ba76ee2d464894b1327 | md5: 1532b7c0e95e4ba76ee2d464894b1327 | CAB:COMPRESSION:MSZIP | Office Document | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1532b7c0e95e4ba76ee2d464894b1327
Sha1	716375a43cd5c1607c9693f6dab28aca28524b98
Sha256	f51dc5e1848daee4e607d46faa25033e1151060cd3482ad4439754440d6c4c01
Sha384	4501c2b482bebeecaa4138ad49b4adb132a6c0b9f3ccf88c467568932db04cedf70559c2ee43c9116bb40c40b7349f94
Sha512	0e95bbdc77f51fc13a428d513a2ec1847c1666748ac8405daf63c3533912c2f0e6425ffc07bfbbaf479a3d0e472eaa062690839309c176c9e142ae2d9be89f5e
SSDeep	12288:NPnFDC+0CqERP1Ifs1F1wRwwk5da05DTEzrlDcZqcUV0t:NPFW92RSU1F1wRwtaw6DEo
TLSH	3AB41221BD854373C8121373990F93E04F688DAC0BB74252216DF59C1EF1AB667B79EA

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4

bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:vbs~T1027~T1059.005

Shape ole:doc>scr:vbs

technique2 nodes