Deep Malware Analysis of 2e9dd5681ac91c8f1bfb15aa2addfa41 | md5: 2e9dd5681ac91c8f1bfb15aa2addfa41 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	2e9dd5681ac91c8f1bfb15aa2addfa41
Sha1	ee0e897deffc135667dd9f78915404c9cb901e1e
Sha256	e87cd984112c6b57fdb8a9203572da62fd27960e59cfea51cf35a959624c404a
Sha384	b51d8a0ad7700dc40158d05d69023b4b6ed0e9f37e762b6f90128344bf72623e80052e6cdc8f8a19a64b980bf2784727
Sha512	7c8210bc81f6ebabd6d13f9b2a4825a58fad8e288402bc2047d805130a87e8c7ce55d53be891867e32dcb7f52cb73012a155dbb0e44f5d73c4520ea47bd84f38
SSDeep	12288:pSQLpk9OG4xClz8fRBIQbqocknh1djMEi60fH:/kN0ClYJl1hXjMg0f
TLSH	3884F1D561EF64801CA042BFD7C0FDEA4A43FAF0B24C87A48212ECE301EAF5996955D7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential