Deep Malware Analysis of da4d3282d5d0a4f808f978ac17e993dd | md5: da4d3282d5d0a4f808f978ac17e993dd | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	da4d3282d5d0a4f808f978ac17e993dd
Sha1	ce3dc8401b4feaa3f33f8640f20623798092c07b
Sha256	303b85937c880811bb3e3689dd4cf6034bba0f13adcc332b36cf6c3a5d7a5e5c
Sha384	66adc0e731e6bcf1b5f54ad5f256136a7f330a1444d2cf32cfbd9b6a2762c462c0586971200742ec6fc53fe9925d3d10
Sha512	0f6192edb4377d7c8f8231e8e2c14221debc29fa1be5731fd9f25eb2f113b0b974ba1cb3bd62764bd7e7cca263b017a2a5648e53f97dbfee81ddc1cfdb973ac0
SSDeep	12288:+SCDe0U+m1V6ECbniSPfS3e2R3feeintFck+TsuC8hHk:+De0wUTiSWzeeiGsP8dk
TLSH	3BA42394C5B857962448E3F9017F19AE1F302CB6CA3DA78E941FC6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes