Deep Malware Analysis of 7cf6a2bf7516a7385b9bdf3f51a74ede | md5: 7cf6a2bf7516a7385b9bdf3f51a74ede | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	7cf6a2bf7516a7385b9bdf3f51a74ede
Sha1	c96e40ba545e701f7bfef26600cdca536389bb81
Sha256	06301e011477c4adc8f566e761972ccf145819133fa52a097115103fb401e330
Sha384	68707ff41849f78a0a71b2a0947b736b60b71ec430725bd485eee71d700da82a6182e5098d32e9ce7dac8271f0f26323
Sha512	3e993f3dcd8dbdbbda9bf33f0e9a881bb02b2545736a7efe7889ac955c63d0fd0b838948c654814146ba4c2e98f6494d38a5ec13fd209ac48a553e90b55f54d0
SSDeep	12288:Er06xUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZB:Er06xUv4t1cNk/wjibhv4b2OnX
TLSH	3CA4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes