Deep Malware Analysis of ebaed9ba059d9e28155aa1e0f8c1e5c1 | md5: ebaed9ba059d9e28155aa1e0f8c1e5c1 | Office Document | CAB:COMPRESSION:MSZIP | Executable | PE (Portable Executable) | PE Memory-Mapped (Dump) | PE File Layout | PDB Path

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ebaed9ba059d9e28155aa1e0f8c1e5c1
Sha1	968ee810e7b5e6aa11bf89424ff75129cec52a4f
Sha256	188a8cebd55d1731041b4cc18efc7b02fbbd1fc3df3ef61c52b51d78b1cd2b02
Sha384	5e1cc4ee1ae12463bb61fb7bcba56458ca3d12892e00510faa308cf2cb4fe035e97211f76e7a9f59e2357b5f6cf911d8
Sha512	0a858c36d32460735d66dcdb3e5ee9bd8b4e2c8e66ae2c95df624ab97b1482e022215fc3a4009eb0304b3aa99a81939bf93b0573f64048297cf6b261678b9215
SSDeep	98304:FkMMwpD74pOTxPjLHLgk92Rdxmk69pa5SUOsFekLS57JkmPMETphToy0seQvsm:mlc4pkbLHLhObmXe/kdkmPDTs
TLSH	68761221754E8C76C5AA363071769E7DDA7CBC305BA08BDB938339EE09315C052FDA92

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 1secondary ignored: 7

bin 7

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>pe:dll>arc:7zsfx

Shape ole:doc>bin>pe:dll>arc:7zsfx

4 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential