Deep Malware Analysis of bb7d3eb578b458a6b6028451168be803 | md5: bb7d3eb578b458a6b6028451168be803 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	bb7d3eb578b458a6b6028451168be803
Sha1	e9358dc6907348839f113c044ce829daef106d18
Sha256	01fcd342a7213606432223a38fc468bf3bd779b5931401e80c9a67045cca2553
Sha384	0bf4851ebbe0b6f6a27f95f64366efd7ae5d36316df32e7512ce56f2c9b5e93f0518cc005132cf000fdc29bd4f6ccab8
Sha512	ebc5bb334aff2c9e7c23590730c0f4bbf93d0038f45ca62dac8823097bb39ffa9f2551819da051d15ca9767755503be1e7037ef32a4ec3e40127250fb1d0d972
SSDeep	12288:MSCDe0U+m1V6ECbniSPfS3e2R3feeintFckXTsuC8hHp:MDe0wUTiSWzeeiDsP8dp
TLSH	CFA42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes