Deep Malware Analysis of 38ea1a178ce2afb157985610d95055a2 | md5: 38ea1a178ce2afb157985610d95055a2 | SOS: 0.29 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | COM Behavior Trace

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	38ea1a178ce2afb157985610d95055a2
Sha1	e03c1867e45949a116283e1bc507e03c03ce8b5a
Sha256	d48dc024471cd39c77599896528687e20d3ccb977cdc01a2cbe7668ba4bc4b00
Sha384	91df3684ba44484209e7610f2148ecbfb897af7d66bdb90b8fb990572c41e73a4aea88a7e46c77abdb5775ae01e9292e
Sha512	324124665077483d54129742f2b8c5add80687476f458f96425c4a28da9bb0021fac2ed291d842bee17cc115b0fcbf786c28b8bfbdcb75acc4aa62c5244ab29d
SSDeep	384:rlNXpmwxPreiAxr9CDr/miy+ro0LmqCGGxSlJNoVj1Jul:pN5mw1dz7ogtTlJNoVj1k
TLSH	8A7219B9468E6364CA5B215C8D0F48E18FBC8591503748E5B3F4D60D2A0EC7C5B7B6AF

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005

Shape scr:vbs

malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 6huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential