Deep Malware Analysis of 5d0aaf44b40b73e6e3261de2c3c58852 | md5: 5d0aaf44b40b73e6e3261de2c3c58852 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	5d0aaf44b40b73e6e3261de2c3c58852
Sha1	76b6b307d861e5d285cbf05824d1b4c539985c49
Sha256	ae6174191f8dba6fff8f7ea55171ff0c88721990bb427a36ef7ab055295ffd59
Sha384	e8e401d38f4b959ae91424d884e818f53b7eafb50bd4466b1858e34f4868f0c55e16243bca5e63376169eb9482ab14f6
Sha512	e81745aa1b040ebed50a833e9793bed9baa26cd32de4001710201664f80db5064a3724c7826f53a23980770034a586a53deed66ad2232ab2028c3065c4b932fb
SSDeep	24576:W1CrLhK2F5L54xS/G0Uhco5jxZxGrXwSwnSrjREODNa7Q07Z0/WqpgbN911xN:bbNMxcclZwtrj2OZiB76/Xgt7N
TLSH	BE451273F8B225F78FE2C157A119E92FDB75BAE27D8D45844121D78500BAAFE0BA1C04

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential