Deep Malware Analysis of 22d53af515b747ae0e3220bee31f51b7 | md5: 22d53af515b747ae0e3220bee31f51b7 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	22d53af515b747ae0e3220bee31f51b7
Sha1	a3d037b78a3a00dd14f406c839b7b1e912373ea8
Sha256	3cc718a9c0e23a016fe63b9e4ca2c96ecae7e460094fc06a3d714e63536d4227
Sha384	34684e6b50d5e05e89e82c2729f5c6dd3fde442573c8be299b89d62edd6b028c5f8af2fd201069af030953cc93a949aa
Sha512	50b866933471d79e08330daf79d0c3af2fee74cb818a09ee6581a06305dc56fa0512139a6cf581b082fbd5ee64f72dd42fb3fc10c820d80dca5cf3379d65791f
SSDeep	12288:3c4SCDe0U+m1V6ECbniSPfS3e2R3feeintFckz:LDe0wUTiSWzeeiz
TLSH	67A4239581B987533484E3B5497B1AEA5F301CF28D3D674F88DAC5F80B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes