Deep Malware Analysis of 5c347016f97d9f5947c4bae7865c0e0b | md5: 5c347016f97d9f5947c4bae7865c0e0b | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5c347016f97d9f5947c4bae7865c0e0b
Sha1	8e4bbd4c18684c804138fc365fd3d0ca68d8c322
Sha256	865f16471d7edcc551afb809883d415536a4b35df3af4e2d3aed97aed77e2bfb
Sha384	84a5edb45e9d9d023e48b8fc1e77ff5163d5b0d5948ca5d682f4c24e3e8716a233ad4b3e0b45a4dcc157ed799d7afc63
Sha512	ac70a52d7c3e2bdcab3164dd62fceb76053f647d1b0ec5629eca46d3ba09adcc37455344dc14eee80339558cce1bc61264a8c7aa15649440538dbde23bddc591
SSDeep	12288:+SCDe0U+m1V6ECbniSPfS3e2R3feeintFckqTsuC8hHw:+De0wUTiSWzeeiKsP8dw
TLSH	09A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes