Deep Malware Analysis of a1c7c2537595ce1d7c1fd62a7179a448 | md5: a1c7c2537595ce1d7c1fd62a7179a448 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a1c7c2537595ce1d7c1fd62a7179a448
Sha1	cf7716bbf4397317a1dc20ee9187dd22df579388
Sha256	61ff760f53f8f11038f32671ee69edb5db4013373802a76883609543c7b0f387
Sha384	4aa68665a4db23cf8c5e925e8539bfe8b900ac6e7c82927b63cb3469b4aaa6f56f52dc8ccb96fe1cea685aa51d222112
Sha512	3811968e24a9aa11d76d12c1f2a2c2ad11b49df9b23614aec011190b8908eefa24a0ccc46fa677128b81e1b37599f2baa54c8a1434c0189430b38abb899584ef
SSDeep	12288:sr06oUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZW:sr06oUv4t1cNk/wjibhv4b2On0
TLSH	0BA4238274716D06D096CFBDD4C1AACAD06E023D35263BE5639294CAFD940367F9BE13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes