Deep Malware Analysis of a697c6b28c966ff9770d87f3b2f230bd | md5: a697c6b28c966ff9770d87f3b2f230bd | SOS: 0.99 | SCRipting.filesystemobject | Microsoft.xmldom | AdoDb.stream | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | COM Behavior Trace

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very high

MD5	a697c6b28c966ff9770d87f3b2f230bd
Sha1	010b10b2da8c88230f6a699df8069e8b996bd126
Sha256	7d6c3f77636fb57179d760978ef1c9ee97d044f368abf2083c96467fcf49d5a4
Sha384	2709193a06658e0585c3a0c9eec14e56a6ef8059753ea57233dc4356adf25f6edeb5cb584c300cf630779015c38befcf
Sha512	22f59059e593412b79bd80036a54499d8fb10601fce1db106d0b5fa1357e9928a53585e16070bbb7a421e646eec052d7872ea0ad63a5ba86bbd5adea6627c3ea
SSDeep	24576:AzoDbQS9wFmQJ6j6dw1INr/Dq1PwlpMy+Ri:uyQxFmKq1Dm
TLSH	AE35D1556E983FB5DFE8160C51BE1E0E43F0528A2816704EFB56AE0F5FFBA40450F1AA

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005

Shape scr:vbs

malicious 1 nodes

Dropped path (COM trace) #1 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 3huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential