Deep Malware Analysis of 85e20c76381141fc826f31caf0c6803c | md5: 85e20c76381141fc826f31caf0c6803c | CAB:COMPRESSION:LZX | Office Document | Executable | PE (Portable Executable) | PE File Layout | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	85e20c76381141fc826f31caf0c6803c
Sha1	93030c0c4996d19601b850e621abe48a3ef49180
Sha256	34062e36d964c778b9aa61ecebd0f2e75961b2d771d30cd5b6ffa7d272c372fd
Sha384	3db3acde3745c4a20802927e5a09a9352a818c7430bf4b900bfd077faea8738af48061bea58a0abc061ea832fca12604
Sha512	9f6dccad97511891620dbdcddc5de6ad566763d1200aaa4fe6aec0725c3914fbe8b33fe5c2816a4fd566cd4577bbbd92a36f11370493406cffbd6960b8e47005
SSDeep	12288:iuUHf+Dmpodgii0berGdcd3w2UAjjZXy/ZpUUxvXfjpSe3wHv:W/+DmpwgiD69AlctEAQ3IeC
TLSH	8B0523842332C5BBD147033486BE55EF5A597D204F670E1D6A48FB883EBE6B8071B9B4

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3

bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>scr:vbs~T1059.005

Shape ole:doc>bin>scr:vbs

technique3 nodes