Deep Malware Analysis of f81c30dfcefc9013de732f5560acbb4c | md5: f81c30dfcefc9013de732f5560acbb4c | Zip Archive | Executable | PE (Portable Executable) | PE File Layout | PDB Path | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f81c30dfcefc9013de732f5560acbb4c
Sha1	50bfd08da4491b5b06ca493b1d5b336bcadb154f
Sha256	6bab496ccb0e22f4ead689bb212b473cf542242c462a2ee005a97b745c895be6
Sha384	f87a7a0e18cb3d30273fca87c919c7ffa9c32128e9c46200035d1692148b50798b8354f5b3dbacece929cbf24dc90a85
Sha512	298a64cfb767b6a1cfd4d6be2b6f0556fb410db9ab22a27bd88cefbe62c53097b8d2c84fbc3896eced2f744362ee9d607fbebac57269c7c016705ac470dae85b
SSDeep	12288:HcwSCDe0U+m1V6ECbniSPfS3e2R3feeintFckL:DDe0wUTiSWzeeiL
TLSH	0EA4239581B983533484E3B5497B1AEA5F301CF28D3D674F88DAC5F81B74E8887EA252

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005

Shape arc:zip>scr:vbs

technique2 nodes

Path arc:zip>pe:exe

Shape arc:zip>pe:exe

2 nodes