Deep Malware Analysis of d024c87ea9c91240497314da7e25a38d | md5: d024c87ea9c91240497314da7e25a38d | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d024c87ea9c91240497314da7e25a38d
Sha1	af26d96f6d3948bd7f845a3094e9884984eccabd
Sha256	06651fb294120b7b22b4b157abfbfa14d2ad86661aabd3ebd47aa97a5c7bee5f
Sha384	5ef790d50500395ae0b3312418093dbade6696b182c4d0a310d604bf47fcdf5bfd135d09356ffa191631e2a5be83fb76
Sha512	9e00019423f9bfc1e33f969afd7605d16f75506a2b8905b932d7c2f39805466bf079efb0425688812fb3a64102c265672baf8c00d4f65c108b97717eef5ee4a9
SSDeep	12288:SSCDe0U+m1V6ECbniSPfS3e2R3feeintFckMTsuC8hHG:SDe0wUTiSWzeei4sP8dG
TLSH	1DA42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes