Deep Malware Analysis of 61833db15a4f4902c4ba3d591623cfea | md5: 61833db15a4f4902c4ba3d591623cfea | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	61833db15a4f4902c4ba3d591623cfea
Sha1	905d13a0c17c5de3f961897000033559eba0558d
Sha256	c68e06da8a345e309af6279a312e7a945d2d33bed160658f400c88716b0e0e0e
Sha384	ac61f557a8f4872de53ab16792beff643339e0110c608d66991394b498a6848ffa529b9ef7b6f86f1ded5f817d611dc4
Sha512	f49f3a85a034c83f0e0d94bc80c766c7f3b97c35e8ab95b432d25dac51d26c09e19d8d518a25c0890b0ee821e55e8827112dba0c26f1273ddad42744f2124844
SSDeep	12288:6SCDe0U+m1V6ECbniSPfS3e2R3feeintFckWTsuC8hHc:6De0wUTiSWzeeiesP8dc
TLSH	1CA42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes