Deep Malware Analysis of 9b9552f8b0a5455d1fa85af65267ef20 | md5: 9b9552f8b0a5455d1fa85af65267ef20 | SOS: 0.29 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | COM Behavior Trace

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	9b9552f8b0a5455d1fa85af65267ef20
Sha1	daefa500089dd00f41de8c58c5cab9eac5d40938
Sha256	07e41a05477d7a60018b076fa54314528cf662cce724707c23697adb9dde559f
Sha384	81a5d09ea3ff1ffae366576f014e3470c096f8b5be3d4ac134e48dc664f8046bf87a8aa235fd14aac4532c5e92760705
Sha512	e60c0db962e702ec0666638ebe02fbd4b7d55ab8cad30f36a511ecea73dff1b6fa22e88a12579c3b25881e2e519e7a20d6f8c953ceee71607491be6829d03ed7
SSDeep	384:Z42guPVNNWexCafDsHlYEzEp1/v1UCLZT4Ord:W2XP2iOjgPyCfh
TLSH	35622922CF43B2698E5F2752786CEC85857E0B767022556CF4F9C2E89467CBCA1348CD

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005

Shape scr:vbs

malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential