Deep Malware Analysis of 4021703b7529b7aadb335030f6c1400a | md5: 4021703b7529b7aadb335030f6c1400a | W | S | m | WScript.Network | Schedule.Service | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	4021703b7529b7aadb335030f6c1400a
Sha1	45bf886627e7ac912358d6d8d608e1ce6e9f8dc4
Sha256	26baa8f6fb6ba37bf23c08980f4ce1b75d647947d9667a1d4b1923bb2033788d
Sha384	8cab8d70d2cad7142d1ba48dd8c5e68a880baffd676074b1f50c89ca6fa57b32b5278a7d63fcb3cf742a90d68093d04a
Sha512	1fa25c1b3e17c5da6fe6b951a6a72b9aa2ea801f77c303345c2516be57a3d2f9c260b8e94b2ddb6f42a6f889b86420b2ca5fa32fdc9ec87860be6afa781e69dc
SSDeep	6144:XivUrBObzrNN93KfGXMbbwgz7nSCdngrPwrGKSsH9Ia5Iyk9MnyTxdrnn8d/yEJE:XvBurfUGXGJ/SVwr999I7799rbd
TLSH	F3251052A3FD6248F6F76F44AEB925658E7BBC9A6D36D01C1250454E0972F80CEB0B33

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005

Shape scr:vbs

malicious 1 nodes

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential