Deep Malware Analysis of 1c7a2ea46cc54b2a022d25ebe036819c | md5: 1c7a2ea46cc54b2a022d25ebe036819c | SOS: 0.34 | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | Office Document | Blacklist VBA | SOS: 0.39 | PowerShell | Batch Command | PowerShell Call | WScript.Shell | T1059 | COM Behavior Trace | SOS: 0.38 | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	1c7a2ea46cc54b2a022d25ebe036819c
Sha1	bdd889bacc15952db570057d9d1ad907914dfc04
Sha256	88082c9b27a44dc1a15e5c35a1cd9747d448ef7301bed78d0718c8e72c794661
Sha384	68a9d43f491f7ab94c4c981fa3770755e1c90b1c228094da4e5f5507f5307ac1a7335862070650b1cf612b112dc536ec
Sha512	b6cec3ffaada444f33e9b1aa6a7e0b160750b4f759d484021f65ccdc3b394a53aace72dde8306bea3516205d5a9d9197fa5a9cbc19e3af4789376768b3c6afed
SSDeep	768:PPdKk3hbdlylKsgqopeJBWhZFGkE+cL2NdAJAYWzHO:nwk3hbdlylKsgqopeJBWhZFGkE+cL2Nq
TLSH	68E240A3B2C6E846DA5957350CEBC6D26722FC515F67834B3288F71E1F71A808E03657

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

5 / 5

Path ole:doc~T1027~T1059~T1059.005>ole:vba~T1027~T1059~T1059.005>scr:bat~T1027~T1059.005>scr:ps1~T1027~T1059.001

Shape ole:doc>ole:vba>scr:bat>scr:ps1

malicious 4 nodes

Path ole:doc~T1027~T1059~T1059.005>ole:vba~T1027~T1059.005

Shape ole:doc>ole:vba

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 3huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Set-Lohuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential