Deep Malware Analysis of dcb4c95311d6c9f5519b1f66a0b5aa26 | md5: dcb4c95311d6c9f5519b1f66a0b5aa26 | Office Document | Blacklist VBA | SVG | T1059.005 | WScript.Shell | DeObfuscated | VBScript | Obfuscated | T1027 | Scripting.FileSystemObject | MSXML2.DOMDocument

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	dcb4c95311d6c9f5519b1f66a0b5aa26
Sha1	094b4e277e07d60c6f2b31b629a503e55d3268a0
Sha256	9d66bfddb6058cd175177ae545831d76c64b2a9a41585d81cb83a54d0eaf210b
Sha384	8a3c0bd0c7d0a1ee8e30928d3705e1053597f863aff9dd71dd67561a1720765f526f7a3ad1a623615315374d0c88f18b
Sha512	42f0ab6f1091f507f59ffb602c65b418529d3eee319b05c13bb735a9fea6c42b30c54d07d223306ac2e6bb935dfb3e4ba0781b3cd0931981c0d59b44cc876036
SSDeep	49152:Mpsc2PGcXoKIJTQHC1O1WXELed/oh+A1hDIvlppikESOe8cR:MpscN1BUC1O1W0TspvYSOZi
TLSH	1CB53322425B39F7D67E887B641CF8E52A0877C41089AC7A21D25C0B1775BEB9049FFE

Module7

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

12 / 12

Path oox:xlsm~T1059.005>oox:media>img

Shape oox:xlsm>oox:media>img

technique3 nodes

Path oox:xlsm~T1059.005>bin

Shape oox:xlsm>bin

technique2 nodes

	Module Name0
	Module1	Blacklist VBA VBA Macro
	Module2	Blacklist VBA VBA Macro
	Module4	VBA Macro
	Module5	VBA Macro
	Module6	Blacklist VBA VBA Macro
	Module7	Blacklist VBA VBA Macro
vbaDNA free preview is limited to 3 modules. Unlock the full module analysis (decompiled P-Code, stomping diffs). Unlock with Essential
	ThisWorkbook	VBA Macro