Deep Malware Analysis of 41a06d7b5a09273c436da894f1acdcab | md5: 41a06d7b5a09273c436da894f1acdcab | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	41a06d7b5a09273c436da894f1acdcab
Sha1	b9727db6ef4e93add8b03169d805241b964813ce
Sha256	d000f329e0466eee0ad11733581ffa1469380108ef42ccd4e49048e793ef67b3
Sha384	0e914cb3c679be136e9d36086b9bacb4f5122392a123be9fd0ef5b0f7f239191cf03af73a7048131cdbd87ec8a45d870
Sha512	e88685645f83e73f5b9aeea5bc7540b20febeed97cf9aaf4c14d81fed50833ffa2cf788ebb578a1ff7960a598f9f8e0538904527dffb2e901168f12654b9f48e
SSDeep	12288:wr06hUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZ5:wr06hUv4t1cNk/wjibhv4b2OnD
TLSH	B1A4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes