Deep Malware Analysis of b49d2ae7225ed676a1c92aec3e684822 | md5: b49d2ae7225ed676a1c92aec3e684822 | SOS: 0.20 | MSXML2.DOMDocument.6.0 | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | COM Behavior Trace

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	b49d2ae7225ed676a1c92aec3e684822
Sha1	d634dbf456c717a7a6871d5de943bd3de6e5e092
Sha256	d64c8bc998a539b751a511c73e61ac773e0a48bc6a85735d0e511ecff2d19756
Sha384	a008825d1927a2081360e32e8fd811001c50dad14cdb234bd1a7ea345ed6cc340d5d3afe5320431238b18d623816cb52
Sha512	0416fc80fa965eeaa1e7d6926a212826526a29daec3ae7347efb19fb12c72893c260db19b38a5c1e9ca30690c5bac8c0773e901ee2b59aa3a5798866c21d5dc7
SSDeep	768:KZegHo9xQzbwxVSYLaUXYztbzdIqZOnUUxoLyM:KZlixQzbeloBTR
TLSH	05933F71050CD3979C8434546A8ECE74E678FE2E7FF41942572ABEA19C3E193FAE4281

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005

Shape scr:vbs

malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential