Deep Malware Analysis of 2fb32b91548b5b02b87f97ace761cfbb | md5: 2fb32b91548b5b02b87f97ace761cfbb | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2fb32b91548b5b02b87f97ace761cfbb
Sha1	7278ef5c4dcf0750592a8e2d74a8b7939637a9b5
Sha256	5a440fd25793899e3b0f4615bd75ff842dd8e9f65e69ac51bc621e464502fa6a
Sha384	331ef9a054099e7b14410d8719deb44bc54e299b9514d12395bf2a73dda7a72f2c2c31d27b5e1b54af3772cfacdcb0b6
Sha512	be001ee01c2aead3c7d1af603c320e519a9b6e45a684542b2e0d76a8f6e5b7bce0abe213f86d1402c1b856ae07afc8a0fd35a4eb9871ad9c3bda2cbd8a9f4a0c
SSDeep	12288:rcWSCDe0U+m1V6ECbniSPfS3e2R3feeintFckp:hDe0wUTiSWzeeip
TLSH	DDA4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes