Deep Malware Analysis of 2871da407c3748ba990af302059898c5 | md5: 2871da407c3748ba990af302059898c5 | Office Document | CAB:COMPRESSION:LZX | Executable | PE (Portable Executable) | PE File Layout | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2871da407c3748ba990af302059898c5
Sha1	b7564019bb3251b2f8567f02eb2163ead00418e9
Sha256	f0157306c1872b748e2a1c4edc12b516e0786fa01c61e9903f67d120c6ae3a90
Sha384	656c1bad434baaf2dd2def136f4f5f33da7a0523843657e4d89f0e8fdd09da6e3cfc02cf97a372428dcfe1ccf3a86085
Sha512	a63cd44c8e56f1703b4a5dd7005c4cce5c4e5f2a133a63005a1f971ce009fd8a9af6f8edf7daf345384abe8891396e4a45cbe46bc6425c2032c112726340a563
SSDeep	24576:lJgw+nDC+YhXsDM/rFLBOzU+tamaTL6nOPdLfLN6:lJgwGC+YZsIDdBOztahTwCLzk
TLSH	DD0523D7B2A07132C732563243BF42B11636AE1CE770B63725AD32C92F7609079A9BD4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2

bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>scr:vbs~T1059.005

Shape ole:doc>bin>scr:vbs

technique3 nodes