Deep Malware Analysis of 1e92dfdabae073364ad634f7b5f3d365 | md5: 1e92dfdabae073364ad634f7b5f3d365 | CAB:COMPRESSION:LZX | Office Document | Executable | PE (Portable Executable) | PE File Layout | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	1e92dfdabae073364ad634f7b5f3d365
Sha1	96b89670e9ed749327fb4b3ff114d320ec86180b
Sha256	c571da34ec2edce2816ff4092ab21abc6250a6c410ee1f54586f2170a2d5010f
Sha384	477a645c49daeab4e1cc1229bab7700ab74a35640dc4adfd0590a3b2dd26a3471164d7e289b3d1a9393a190430168675
Sha512	ccbade66dd2d241613c3bac9f264fe660b9536adb5e86863f407353aab175f5245d223dc2fd9424c728bc9b65919bdd52709b791da18154faf387c13ce82a845
SSDeep	6144:mFG6Ug4yDf0/Bu08rKS932ZH1olrr0D+0xKZdQkOgwPTXy95GqJGwebcANDVtdnS:mQUHf+DmpodUwPTXs5GlL6VUTxjWD7
TLSH	38C42313B3629827D8534736CF9F4AF80E37AC660757DA161A05BB9C7EB315103268F9

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3

bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>scr:vbs~T1059.005

Shape ole:doc>bin>scr:vbs

technique3 nodes