Deep Malware Analysis of c7d71ad31771236d20b4b88b12586655 | md5: c7d71ad31771236d20b4b88b12586655 | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	c7d71ad31771236d20b4b88b12586655
Sha1	60835bcf538ee515bee207c8ee21170916f25045
Sha256	876de483fb47861e27d3e3799f0199b5b79bf4cdf64964e974273def5acf384a
Sha384	a47e0e1affff6269c84af7c5435a978ae7308e0c82c29e3b49f09425e434f5e924095b7cd8159e795667cd93f1ecced6
Sha512	fca65ebbcad3a249281400d2775884bb726499c5545a7ae89b7134518ad4d856ab3ed23b7e86d74a34c10a31e3b79ff9081497fe475abc4e525df45d5ce7c6a9
SSDeep	6144:U4swFCi/kl1Cwajbft9wLvDeccG6hG4przoYQYhclWbEbJrjF2uIIYRd4m+0b+k4:dx+1Ct/t9wLLebhI4RzrSlEAq/Rf+W9G
TLSH	3384D0B8E46BF8E31257C22BD3406D5786761AC64766F16503AE2F874E1EFD4CF68880

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential