Deep Malware Analysis of ccd682c7621e7706bd224836ed23c9c9 | md5: ccd682c7621e7706bd224836ed23c9c9 | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | .Net | PDB Path | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ccd682c7621e7706bd224836ed23c9c9
Sha1	c05080232166fc1f5f61b66c3e7848d07b523891
Sha256	399f5e0c17c6fd90d794e0bc59c918165d6c98f59ec66e247736099a07863b21
Sha384	adb0d93ee65698f3d038f11655304e1ff70ebe4124ec58982f5360b7f1e4a48386e5fb51aa22a70c45b6a9ded770e436
Sha512	b8b89c6e28e811be39f55711ee0952e9ea974a573e1a4da9bca95d3bc4d0a07b14d93481be5355e6ecfe42a748865bd37a45eaf27127664bbba857b5a3cd9684
SSDeep	98304:MfaA0EgrTBtc0PI/LvAecqB1rXsuoZDyC:MaBNUvaqXsuG
TLSH	C9E533B81A0E3E9AD8BCF1707DA05EBB575C409D97660E33B4C126E9F67A4004793BD2

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 7 STICH kept: 2secondary ignored: 5

bin 5

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:ps1~T1027~T1059.001

Shape arc:zip>scr:ps1

malicious 2 nodes

Path arc:zip>pe:dll

Shape arc:zip>pe:dll

2 nodes