Deep Malware Analysis of c13e659ecf38da788d64bdc98604a209 | md5: c13e659ecf38da788d64bdc98604a209 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c13e659ecf38da788d64bdc98604a209
Sha1	0020b2b1fd976509f459741ce2767184d3ca0fe8
Sha256	c46fc82dcbf92c1d094b4c13fda563e51dff4b4ce37f3b51d979b1f7a092a1f7
Sha384	dd335f8dd455f8477b6aa2cc2413c489858ee2fdec73a3893d2349d6f36efc81ebe7196a6293ad5885512569936ffd6a
Sha512	1339cabcd9ea22452a1eb42c250fa68c0c49d3e1c91cf4a98b3bfc11249add93948bfccaf713f475480a158f1fe6da94fff466b476e0ff35c6f923dc9e64ce68
SSDeep	12288:8r06jUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZr:8r06jUv4t1cNk/wjibhv4b2Onp
TLSH	BFA4238274716D06D0A6CFBDD4C1AACAD06A023D35263BE5639294CABD940367F9BF13

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes