Deep Malware Analysis of 90d3633c4721337fb970fc0c64e0bc8e | md5: 90d3633c4721337fb970fc0c64e0bc8e | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	90d3633c4721337fb970fc0c64e0bc8e
Sha1	c9eaf73a112565e82a30e6b33c319554b631ea18
Sha256	0056441e90ee0d2b3121f0a761660b52644bae557196a4599f5480d48e853d8d
Sha384	47484b9f3579c1dbfeacb3c6e6e238802eafc5e58c0408c1d60c457e201b35978c2d517b6430442c9943d7bb72cc0195
Sha512	ff79bb2c4c1c037b7fdae9bd3c4320c47c85cf687566bab7958b2847458ccd8be092a50f68517e2d704c925a24658cf7674bc78b7a8f8e76d7a61b1cd2ade13a
SSDeep	12288:Qr06CUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZY:Qr06CUv4t1cNk/wjibhv4b2Ona
TLSH	1FA4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes