Deep Malware Analysis of e889f6cc9eb02fc55dbd6529e3379aca | md5: e889f6cc9eb02fc55dbd6529e3379aca | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e889f6cc9eb02fc55dbd6529e3379aca
Sha1	1b5f9a8e4debfeef84aeee5f22d53666942e2136
Sha256	4ae95176f62b25c8993412d61de4e668a536617590a2012eece66ca96077b177
Sha384	99044acfa2111a7ed64198519b742207c9c4db79803f04959e23df2dd466b188617e1c65b77563ca78c3fbce137f36da
Sha512	600860e72c670623a8b205e75a5eeca2680542d568239ce71fc8928ba4b12cbc346c6c2e5a5c414214ac5e0127d111613a50d8bc6c6506226ff7815c3758013d
SSDeep	12288:ySCDe0U+m1V6ECbniSPfS3e2R3feeintFckKTsuC8hHs:yDe0wUTiSWzeeiqsP8ds
TLSH	74A42394C1B857962448E3F9017F19AE1F302CB6CA3DA78E941FD6E84B64B8CD3E6057

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes