Deep Malware Analysis of dfae29194a72477e715e29b61d7c05ae | md5: dfae29194a72477e715e29b61d7c05ae | Zip Archive | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Executable | PE (Portable Executable) | PE File Layout | PDB Path

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	dfae29194a72477e715e29b61d7c05ae
Sha1	62656095a5a3e3020b9e40fdc38f3824d72c23db
Sha256	597b08e7bb15930f5f4ffaddac6a8138b9397d9a8b638a3a62ba2f7197f66378
Sha384	0b02aec436c751bd0f5e9adc6192b73f266807a2c67d4793cd9745f80d0fe5945bfcb1474f8c5ca6b4059889f18cdcb3
Sha512	62283ac5ca702cb40ccb206926a0f504d64835481f459e3aa92338485b8df66e6997b626925a72b44a2c7dce881a7e6c21b0e64eced19d8faa3eb7c3e9688781
SSDeep	12288:4SCDe0U+m1V6ECbniSPfS3e2R3feeintFck5TsuC8hH7:4De0wUTiSWzeeiBsP8d7
TLSH	8BA42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes