Deep Malware Analysis of b6ec476496e1b658efaa6426090e82a0 | md5: b6ec476496e1b658efaa6426090e82a0 | Rar Archive | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b6ec476496e1b658efaa6426090e82a0
Sha1	17c80b97b8090c558daf55070d5b7001009fe84f
Sha256	c63d3b36b0606cce8e57ce4fed83e4f8c259a82f5754d2409f0b719f134dd57b
Sha384	fcf44e3c66ac614b6997f44ad4d26bd7ee5dc578688d3b72631beae5802dd86f0e163b4f1dd323859e345f72acdd3f75
Sha512	8e12eda1aca59fdf23e4a736e43c4dff627ab53c188c1096bd94e13d6c32187d1aba416d3226634fcc5bedabf6b7f9663600912ad842c4523f321906ca261e40
SSDeep	48:ZSi/ZsVb5G8NOAuLFef6R3mytVRypNsv9Oigy9xxvXR2BOPj:ZS2ME8QRLgrmDv9OiR7xv26j
TLSH	5F41280488F17BE1610DD9E4DA46C282F2BAB26E1D3FB82C255D3220A728E49E6E1459

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:rar>scr:ps1~T1027~T1059.001

Shape arc:rar>scr:ps1

malicious 2 nodes