Deep Malware Analysis of 9c02df2046f03d0bd957c621b0911fb1 | md5: 9c02df2046f03d0bd957c621b0911fb1 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9c02df2046f03d0bd957c621b0911fb1
Sha1	67ba799fcb288842d8b1b31780b329bc29f75356
Sha256	59f0504df2b612435403f6cb5e90e79c0e2c12a9e5444d7ff46cdaa7dc2ae51d
Sha384	83fa16537f993b6fa9bbed82662a45e7349e2471f3fc6b24940f207a8816589da935621f250ba94198fc9c92c5e1358e
Sha512	f7f95fa0550875d9adb28e70a52942c4f177b20a4668040017f581cc6e9973fdd4deb6ce3bbed4b4141e161520eafe5afc1637df18f2bb2b15b95710be142546
SSDeep	12288:or06tUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZV:or06tUv4t1cNk/wjibhv4b2Onn
TLSH	2AA4238274716D0AC096CFBDD4C1AACAD06A023D35663BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes