Deep Malware Analysis of 9cdd1b53aa61ca09696cb8317e52a447 | md5: 9cdd1b53aa61ca09696cb8317e52a447 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	9cdd1b53aa61ca09696cb8317e52a447
Sha1	1baa19d35d471a873821b984f816f68e4083d7d6
Sha256	aedb57ee1cf1ee1e88afe7327628b900dca3d0c247c8bf8e4fdc799ad937b94a
Sha384	7303f2d44f9b8a89a357eba1f528d40c73c5418d9b8bf9830f965e5051f3c6f20d5d713e277457f436d8fdc4124eb74f
Sha512	bbaa869563260344ced72424a0cba07d511e453b0588088ed5b181ec8f439ccde5be4ee832650073579ede7ffb29b8305f94aec6c42e02f3a5809b74e84a1609
SSDeep	12288:sr06QUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZW:sr06QUv4t1cNk/wjibhv4b2On0
TLSH	C8A4238274716D06D096CFBDD4C1AACAD06A023D35263BE5639298CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes