Deep Malware Analysis of c5514cddf5a8f7b5a9989d958dbd0f98 | md5: c5514cddf5a8f7b5a9989d958dbd0f98 | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c5514cddf5a8f7b5a9989d958dbd0f98
Sha1	9966590fae6f304b86df0cad8f78a184e72a5ab6
Sha256	458d7cb2b087c5e660a4e1029595e9e0a1645f9331889c52c47485eebad7bc2e
Sha384	b6c96076f0f55811e4aa2c84f75b76bd793834ffd993496b48bbdebe7517350ef6da75963e524511185f2945e2900806
Sha512	1b8c6507d20e5f45652be28c777fe7598f0d1bb31bc03e9f5e0cf284363fa357f436ffbd98eaf242116b3f29ec98b7ec91930978c0345b3d483e196ef0599ec8
SSDeep	12288:3cNSCDe0U+m1V6ECbniSPfS3e2R3feeintFckg:qDe0wUTiSWzeeig
TLSH	81A4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes