Deep Malware Analysis of 2b50a15ce3de45da8c8cb3dcda747382 | md5: 2b50a15ce3de45da8c8cb3dcda747382 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2b50a15ce3de45da8c8cb3dcda747382
Sha1	0d9fc94bb7854591bea9c837b246f49f0f780e50
Sha256	0453c8b1ddeced4a2fd22658a04e95abd7134d674715659c52a95f9a43bba31a
Sha384	3f333018993a987254e87933b73a84c8e6c0dec45a9ae7455f0965c3aa666e1aa6ffb3f9c1a1c953bcb39b2998dbf7c8
Sha512	2a202d436716579a9ca04144dfb72a09989e614e38600138507b308ea5924583e3c70dc09c531a9de283325e2b9b8e40e1465a544b7bf9508d20e32b3bd69b1f
SSDeep	12288:or06lUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZt:or06lUv4t1cNk/wjibhv4b2Onn
TLSH	F9A4238274716D06C096CFBDD4C1AACAD06A023D35663BE5A39294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes