Deep Malware Analysis of 8e3d9f4a281356675ef1cfbbc8e4024a | md5: 8e3d9f4a281356675ef1cfbbc8e4024a | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	8e3d9f4a281356675ef1cfbbc8e4024a
Sha1	5a6b004fd93b71c10c8ef1bdaa3014f7302198f1
Sha256	a98f80710f27fae09f83fa42478ffc7aa2d922016ac775aafcc5ae5a026d13b0
Sha384	118c01825ed8800a7d52c4bb37acbb8db36845f2bc9b8f37210095131a06f1a3f6b679c93896409acf1005a46044c620
Sha512	3fba48bca728c2ab7bcb5caa7816609fe47325543c393f289b23d10db26b6a53b45bc817a6142e540eadad3401952d006a1c5d1d0abc9d6a83e22108c413d13b
SSDeep	12288:4SCDe0U+m1V6ECbniSPfS3e2R3feeintFck5TsuC8hH7:4De0wUTiSWzeeiBsP8d7
TLSH	45A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes