Deep Malware Analysis of cfee07a9812c5809d85dcf1ca495b95a | md5: cfee07a9812c5809d85dcf1ca495b95a | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	cfee07a9812c5809d85dcf1ca495b95a
Sha1	c0e40b135589c7caef67de6dcc0f95107c036141
Sha256	b46266dc97bbe195b7ccdacf5cd92b13fcbeb9100be6ee5f73cd08816a50d302
Sha384	02721a76714e1c3ca262822be0b5f9107fe0efa01011af19c854bda6bae814e2b49a8bfb11c2c472e0f096a01b944fee
Sha512	a3f097bdba5907ded2f69019e5e5d8a674dd07cbcfa76c2854002c475ab3efae57e79ec0a04363409b2479598279ada28f139836dd58d09a1037738847907a9d
SSDeep	12288:XcRSCDe0U+m1V6ECbniSPfS3e2R3feeintFckM:qDe0wUTiSWzeeiM
TLSH	99A4239581B987533484E3B5497B1AEA5F301CF28D3D674F88DAC5F80B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes