Deep Malware Analysis of 5ca6b061dc18d8328fc4e81a0e78b8fe | md5: 5ca6b061dc18d8328fc4e81a0e78b8fe | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5ca6b061dc18d8328fc4e81a0e78b8fe
Sha1	7fe4b3c8024794ff1772618114eb1c704d41dab8
Sha256	bc2ec920cab1ff0aae9f0fcc42afe49c0b3ec4009827dfa68139b19c8983604d
Sha384	211e3a3a74d4c83955578eb03a7a9a6f133861204ef2976e24d97e026e939d7da55f30b7d6d3c63f527175877181de9b
Sha512	238d09bd06b94083df5f628688f832f5f7392eb3df2c96f1af04878bdeec59220b41ca03ad48a81bd5a1f7c4b6a2f79fbc686495d38dbd036f4611a403fdc67a
SSDeep	12288:KSCDe0U+m1V6ECbniSPfS3e2R3feeintFckMTsuC8hHG:KDe0wUTiSWzeei4sP8dG
TLSH	D6A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes