Deep Malware Analysis of d4df77efc2d7af97efdb28f5c9a335ad | md5: d4df77efc2d7af97efdb28f5c9a335ad | CAB:COMPRESSION:MSZIP | Office Document | T1059.001 | T1027 | DeObfuscated | PowerShell | SOS: 0.66 | WScript.Shell | ADODB.Stream | Scripting.FileSystemObject | VBScript | T1059.005 | Obfuscated | VBS Execute Sub-Script | COM Behavior Trace | SOS: 0.45

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	d4df77efc2d7af97efdb28f5c9a335ad
Sha1	d75e3e1bb2e21df20c2d4beabd168e1c60f60977
Sha256	de958b6195ea807ae674b522a907be91331c4d12e564e3a8e8d86d8db64d33cd
Sha384	0d2338dd07ea13332aa4162f4fd7d1bad67e998e2f675a4c9df1c9edeb779233fb0ce281468c37a40b24535edf6447c4
Sha512	7e3a36eaeffd38f312a92bcbcbd463c43eaea0592d7c7239c1bb7224fc23414abd3171f03e8043653777d2b0e6de40ee99cf223e9d8562ccd6950d6f22be68e0
SSDeep	24576:74nnnnnnnkoVYOD2nOtBkA2yxR9P1ivgvXZ4NqWzbE/de/i1j30wLcwclRcC:74nnnnnnnkbODIOtBP79C54GilTLaRZ
TLSH	FEE53B636950614552B4A8FAAEBE5E3B785F340D1029998EFED30F86F52D6F84C02D0F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:ps1~T1027~T1059.001

Shape ole:doc>scr:ps1

malicious 2 nodes

Path ole:doc>scr:vbs~T1027~T1059.005

Shape ole:doc>scr:vbs

malicious 2 nodes