Deep Malware Analysis of 4e69421ba429e362a32bfd5ce6ea8e8e | md5: 4e69421ba429e362a32bfd5ce6ea8e8e | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4e69421ba429e362a32bfd5ce6ea8e8e
Sha1	586e29db285192ab870581ea5da1936ed1c7f9ef
Sha256	8a4099f3f17c991dd5dbf942455d217bc03aad48334960419615a4ce96bae8a8
Sha384	186ae12132a8cda97169c6c48db66cbb91de322ad458e84941e5136a2c34d3099fa23436d572ee43432a4d09d9e4a397
Sha512	f29c511b832c026084e4a01f80f3650798c237c61c721ad820dec66dc11336d34b63b1541838a4e9e87dba2cdecc066f5a4e8992b08b9d72ed99a4c46346f615
SSDeep	12288:PcbSCDe0U+m1V6ECbniSPfS3e2R3feeintFck+:QDe0wUTiSWzeei+
TLSH	83A4239581B987533484E3B5497B1AEA5F301CF28D3D674F88DAC5F80B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes