Deep Malware Analysis of 6f1de84430eca5688411dea0569f5710 | md5: 6f1de84430eca5688411dea0569f5710 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	6f1de84430eca5688411dea0569f5710
Sha1	324f7e0979ef13961972814f578e6884c057a58f
Sha256	3b246d3c6b3223a6efdc73762f4bf76f73f76f59494a55ec587fe70c3da9ea2b
Sha384	72d4ba4e1b9aa46074677b03adb4733276944f4f330d45a09ebaec97c1fe564897e3eaddcc7edb98e9f9d3fdd61618c2
Sha512	6fb3b8e3e6f7a879514ccc289369db3e345256c622eb71fc79a31e7688053fef45a48dd7bedc0acd11e4d380734da9b87b08ff345ba6257935f3eaf0f8047a3a
SSDeep	12288:or06rUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZX:or06rUv4t1cNk/wjibhv4b2On1
TLSH	C5A4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes