Deep Malware Analysis of 591d7b67aad1fae13c679cdc9e4af821 | md5: 591d7b67aad1fae13c679cdc9e4af821 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	591d7b67aad1fae13c679cdc9e4af821
Sha1	789e180cb6e3ecbbe454423c4a8eb9cf0c045a36
Sha256	daa58751b8402ba0b628ddaabddbd849d9e2304868eb934c864d68f42c1ca8c8
Sha384	3dcc398947d6f453e73ea8f135be2059ae85582367629c3247184e30f4e09abd1d09d6aa6933ce798232a0d05dd7ff79
Sha512	c6e6e88dae1a3ab386e4ac76da2d04125fe2c9f32a20bac944bdfaa0e56d1861a1777ef71daf272d5a00daed2db91ff15fffc18808078254a74f11d7a9b22921
SSDeep	12288:9Bt1h2CN3Ks8XjdsvfCAXiu/C2RU/4q3Qezuq:B9KbwDDRoRgezT
TLSH	C594E07012FE78D507ACF7076395EC9589532BF48CA7DEA81BC688FA5314F24D8B442A

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential