Deep Malware Analysis of ee271237806f726412e7e53507650f3c | md5: ee271237806f726412e7e53507650f3c | Office Document | CAB:COMPRESSION:LZX | Executable | PE (Portable Executable) | PE File Layout | PDB Path | PE Memory-Mapped (Dump)

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ee271237806f726412e7e53507650f3c
Sha1	5581cf2ca70bba1ae5e2d7a21da0328464f2e8d4
Sha256	3a41acf04286e9fb1bdbcc2773c62cfba717bce93a892ecb738792cd014d4ddc
Sha384	d353fcd057063e24907616735fed5e491f56aaa5dd59936e13cc99e4c0ce20587ce83f22ef9360619a1b4bb36ec6e6cc
Sha512	1a7eb1f9ba6f20d6e64b31ea29edc43f5673879a8d6c51c7156393b7018976832f3ad12df06823f03784c1cff95cb7a00b2fd7be16a6c2346568191bef60f415
SSDeep	196608:E3KoUc4BPw8VAzd6Z5ls2DafDN70uL4U2liSJnvsOTN:GnWP2xSgZ70uFQfvsO
TLSH	14863348FEA14B05DCF582B8415A8723771E0CE1BB46D557CA2F727C1A7A2B98BD70E0

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 1secondary ignored: 7

bin 6img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>bin>pe:dll

Shape ole:doc>bin>pe:dll

3 nodes

PE Layout UNKNWOWNsuspect

Memoryhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential