Deep Malware Analysis of 997d3533aa9210c4091c19a25e3eef10 | md5: 997d3533aa9210c4091c19a25e3eef10 | Office Document | Blacklist VBA | wscript.shell | ADODB.Stream | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	997d3533aa9210c4091c19a25e3eef10
Sha1	d9788b9215a128f8c0090d011730bb97aecc9cd0
Sha256	4378723bbaa2ae5af38272974f1f5e2987ab05bbf52c0a64edd56f027be19bcd
Sha384	f4b2921bb5c9569032374f916b9edaae0a0d83812f37942084c2693acc7e28ec9c1937ee98675566ff301d7b1680a2f4
Sha512	75b4c37554d79382738ca601fe562445e2048c3d68001f136bfa15a9bc7b5decc7cd2d614065691352dd792bacf0b4895784b8e5f0b736300b1f9eadbe98a32d
SSDeep	3072:MERwd9zQq190bd+O3hnfd6ZclHy/8dalPr4BXHE3+v6uiOZ3ZGgToOqknO:ttg0b8OlgZAHNaZ0BU3+v6uFbFqknO
TLSH	E7E312AEE93D5A07D5778831C5C8574AF926D2CC11A4B2390BC0872FB6CA0939F897D7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 3secondary ignored: 5

bin 1oox:metadata 1oox:style 1oox:theme 1xml 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path oox:xlsm>oox:vba~T1059.005

Shape oox:xlsm>oox:vba

technique2 nodes

Path oox:xlsm>ole:doc

Shape oox:xlsm>ole:doc

2 nodes