Deep Malware Analysis of a1c249edabd90e696d384eb76cc1592c | md5: a1c249edabd90e696d384eb76cc1592c | WScript.Shell | WbemScripting.SWbemLocator | MSXML2.ServerXMLHTTP.6.0 | WinHttp.WinHttpRequest.5.1 | ADODB.Stream | Scripting.FileSystemObject | VBScript | T1059.005

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	a1c249edabd90e696d384eb76cc1592c
Sha1	f27387c596409e65503d9c1aa4e1133839eb80d5
Sha256	d4971d87f7d0e94f302ac708a733f9e0166eba8daa4a5e0c8e41ac580643ff8c
Sha384	14bf96d92c14601a83bc07849aa78c7560268a54657c71d7924cc3bdee16af043033f5257389a52594a793b1616f64d2
Sha512	a04c8583acd9a9ac56978272cf136c8022b4269a639cc08e92f3d2eacb0e6dcae12edcb34d1d17597b48a06d6952f4c98761b482e24b1dde26bd83d664c04113
SSDeep	48:C5/7AG+O867/nzgL8rQ5zVCm66K+pjXlX87tX1/EJF80yk3RnAXEN8PNxT0nXHrj:eTA7O867/nUwSkmpjVMX0yFEaP3qXrY2
TLSH	3651334A6D2790D22CF7EEA1E623651CE9319416BD7B4D3F3C90E48C4B1DF79944408B

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1059.005

Shape scr:vbs

technique1 nodes

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential