Deep Malware Analysis of 86e6c327b607eff0191592e105210891 | md5: 86e6c327b607eff0191592e105210891 | CAB:COMPRESSION:LZX | Office Document | Executable | PE (Portable Executable) | PE File Layout | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	86e6c327b607eff0191592e105210891
Sha1	ea425b996341cbae104e07578772f6fa0e136d74
Sha256	73e08fd031826e209cbcb79030810a64361a9ff818175a35cec341a3920c9496
Sha384	dcc2bb01c8e67004c185367c56034dffb2366a0c58baee2ba9b9d5800fc03df3453027968d77e791f6a9b0c3fe937f08
Sha512	36558c8316f2e12387135e2ec9c21b64e08d9d373718a0aa8748e2c50a1689f370433e42d007f9c6144a06e2008a548f6faeb8a47ad586f4ed64000afcec5fe4
SSDeep	12288:rxUHf+DmpodpU3YgCW4Q/blVEq/K5F1nr09U/0FIwZmy1Cs3acH18:+/+DmpwHE/hL/K5FVZ/fUmS3acHi
TLSH	EC05234AB325C66EC2B34E7A9BDFD8B80B719D51C3C20E48D55CFA6D1C3E524461E8B8

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3

bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>scr:vbs~T1059.005

Shape ole:doc>bin>scr:vbs

technique3 nodes