Deep Malware Analysis of 42dc92db24c1e8078abac3e5223b527d | md5: 42dc92db24c1e8078abac3e5223b527d | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	42dc92db24c1e8078abac3e5223b527d
Sha1	a32623771a0554d7a011100d1b29ae7399c8e289
Sha256	aad8f34d5100e4abf5bcc8b93d62d7f40e832c70e4f202b4b12f6cca958c4d84
Sha384	604f3feb3f510e9cab487a53c0e16f2af76f44d1c656d88b2e8b3c64b0a82234b45fc5ebc447aaf657c61f371e207ecc
Sha512	144416c177bafe543984fca164ae855ed5f8966a3a1163c2894c372a1b8437149ed13638df7eec0e7d4210beabc62180fb478c779762a87e0a1a5d5dd6bcfc19
SSDeep	6144:cNVF9nZYFfsSBzipkP2hprmvvPHwdtTd6cMJodqDdB8jG9c977kcSsCygRSZ4:cr6FkgztPCprm/Hw3d9MOQ0q9c5uSG
TLSH	A094F16349476A26B39A6D98C1272ED216897085F462E3FCD74B2B31148EBFCD0B7C71

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential