Deep Malware Analysis of 071f7c889ad4187288287376f3cd220e | md5: 071f7c889ad4187288287376f3cd220e | CAB:COMPRESSION:MSZIP | Office Document | T1059.001 | T1027 | DeObfuscated | PowerShell

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	071f7c889ad4187288287376f3cd220e
Sha1	4a2e101c692f986f9b269e3fcec989ca0b79ac97
Sha256	5eb8b14aad3d18a2733e4928aedd7b0b643e042c0947a1c8283091a7e99b327a
Sha384	e624df983691eba79fc8abc751ef79d7cb8d3b5a9bac8f6d784b7b632eeb24932156d35acc7c7fe161fa71bb2f4a0745
Sha512	a96296ccd76cafc1e64036a2cd4ef2a1bac0266fd53534d1fc1da49324158b230b7ceb7cfad0af2e6ba95b13a249aee2086e78ac9e0c5170166b45eb2031cd82
SSDeep	24576:gfxK1PcpukylEL3CJEdBPHjzWO1UauftimpvpYe0DZp52lHF6Y5mJYAppfSKMxAu:gQSdDSidBLZUamiuX0Df52lMUllnP
TLSH	02B55C636A50600642B5A8FABEBD5E37795F340D101AD98EFFD30B86E51E6F84802D1F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:ps1~T1027~T1059.001

Shape ole:doc>scr:ps1

malicious 2 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

"$env:huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"$env:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential