Deep Malware Analysis of dcae184ef31a93b263ab112b5e112b91 | md5: dcae184ef31a93b263ab112b5e112b91 | Office Document | CAB:COMPRESSION:MSZIP | T1059.001 | PowerShell | T1059.005 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	dcae184ef31a93b263ab112b5e112b91
Sha1	4e010f7f929294772affc3990f6acee2e85f8341
Sha256	9b3dca0664de057a9e56eb68bd00d5b0250496bba64a8f398351b243cb4a340f
Sha384	3a294e6cd026e1b010cc33cb424dcca0ea6a8d9cc3e2586c9ceffb056a8bb84cdaab46db85753ca6e9e2744088dbb582
Sha512	ab5dcf97212836324b132c34944cc60ab799fd8fdff526887f3ca3f4a3cce2aa66744e9274a7fc43bb49541208ba34e6eead1b06cbca810a467248b9f3a28955
SSDeep	24576:wanjw20jzvpNAAxAF3ETOBKkrh4cdhTQKkcR2wYTRCYsNMb:znjd0fpu+AFD0yhRPTQzcH3HE
TLSH	95A55D636A50600542B5A4FABEBD5E37694F3409101A998EFFD34B8AF52E6FC4C02D1F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:ps1~T1027~T1059.001~T1059.005

Shape ole:doc>scr:ps1

malicious 2 nodes