Deep Malware Analysis of 210430a785b20585c5b474e4dd9edfa3 | md5: 210430a785b20585c5b474e4dd9edfa3 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	210430a785b20585c5b474e4dd9edfa3
Sha1	1759b84226c704a16f4b4425e805a5445232f7e0
Sha256	79b09ad6b9416780ac12ebb7ffb01e7581641459db671f0ec3b2da3d130e99b8
Sha384	3d14f9b1425304d0d1bbe2edc40cf1a1e62e84af74a4a3648bcdb481da89cba5bf0c01b9276937658a2183266dc96b59
Sha512	10f6889fca77eb2913171d20b2f488451ec33cfa19f05b25ce7f2a433941119255ddcfd79bc081e4c430c2867b5caaf76982b9407711718fca2f926684eb0dbd
SSDeep	12288:7ciSCDe0U+m1V6ECbniSPfS3e2R3feeintFck9:9De0wUTiSWzeei9
TLSH	5CA4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes