Deep Malware Analysis of b89a4fee31df9e02490ffe41540d7074 | md5: b89a4fee31df9e02490ffe41540d7074 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	b89a4fee31df9e02490ffe41540d7074
Sha1	312004be3917153b724dbafc1c4f8f0d47e86faa
Sha256	0fa88dc740aeafb4e9caaacd1b9c4add0384435b99c87beaa60ab166ca53bdb3
Sha384	dd11e5cc04407c5a0995a41043de136ae5d17675dfa416607f49b4f48419e22aa093a3941713673f5c7cefb4183cda31
Sha512	c142f96b3b83b439eb35b8603e4cd93054562592d2b0c9022fc143f5949b0cd99ac19eaf5b0fa0d6f69849c92624ac665c33844f8c8a203cc21d9e2ec74d4c95
SSDeep	12288:ASCDe0U+m1V6ECbniSPfS3e2R3feeintFckvTsuC8hHV:ADe0wUTiSWzeeibsP8dV
TLSH	A5A42394C1B857962448E3F9017F19AE5F302CB6CA3DA78E941FC6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes