Deep Malware Analysis of bf3be59eb517929d09e7d942b8aab9c5 | md5: bf3be59eb517929d09e7d942b8aab9c5 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | Office Document | Corrupted

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	bf3be59eb517929d09e7d942b8aab9c5
Sha1	adf28370f661317f8ec35928ea2fede4e77fcef0
Sha256	d107df4b0c98c2880724acbcae920a23076fb90be1e2d4cfd4cb9801d5597b71
Sha384	e630e1646eb08e8aa71d4c07fb2ebbda62161bcc11dafe5acb71ae55667d1ab291398ccd66171f3a17a182cd4a97efa6
Sha512	5954a28323dd5f889ca6572dad8e1db0adc3789d1329064eb29e67f79534702cd10e1e739a8adce85482f7efe07bc1dc7779a1bf503651cbfcd5bb4876bbc0f3
SSDeep	49152:bMfn6GgEWJR0l+Irh9zSxJH5onsfiL/Zhv8Ap5cU5L4xaej4fKndAdQ4H5:bYn6KC+z9zSJons6L/Zhv8a5c2waXKA5
TLSH	92C533F2C60B4BC84A094BB612E44B6D3ED2893F566672656E9F1F476C0F2315F0272B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5

bin 4img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>ole:doc>ole:doc

Shape arc:zip>ole:doc>ole:doc

malicious 3 nodes

Path arc:zip>pe:dll

Shape arc:zip>pe:dll

2 nodes