Deep Malware Analysis of 94b2c2f4829a5d16bd7bc3efa7e27594 | md5: 94b2c2f4829a5d16bd7bc3efa7e27594 | CAB:COMPRESSION:LZX | Office Document | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	94b2c2f4829a5d16bd7bc3efa7e27594
Sha1	f8bae731bb1db5318138ecf5515ef8c8859abf93
Sha256	fb6b0467ce17ed027f3e6eade7dc298b7ffece59c6f0150b57ada60259dde797
Sha384	dd8374778eb4a20331dc20d229ec0bc500eab1f32b7361e94b11208a1b5544261a922e36db7e674fe2bcdfd28b99f684
Sha512	1fe61ad69b43527edd7007d719ce0dd2e76d9ae8296a9f51541a84f9431e7f6e02c7a3612a61aef23504e2898176dfbc30d8a9a3f55c28d5f1b3e6a491093747
SSDeep	24576:8tSmlAmesDoaXIXGbOjF3QifCa1KiTZNSbbNZAsfKPokC:i4mJMo8gkBQifbZZNSbbNZAbgkC
TLSH	70253305AE00C292ED89A7B468D342938F2BDED09DC655F27D1FB1693136AD095CBEF0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>pe:exe

Shape ole:doc>bin>pe:exe

3 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential