Deep Malware Analysis of e7926f9d96c07198119d093c4555f29b | md5: e7926f9d96c07198119d093c4555f29b | CAB:COMPRESSION:MSZIP | Office Document | PowerShell | T1059.001 | T1027 | DeObfuscated

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	e7926f9d96c07198119d093c4555f29b
Sha1	f754dad5bd033f5c13d259d7d3388a362829888e
Sha256	f189bdd403dd605860ef3430c3a6cde7690820647a1c878d8714e3728c845303
Sha384	4ebb5c7915f7fcc719f4e6f3e70945d0878cb0bf5338162bd07eead55ca966c51772a8917d2fdd602731e5efd1ff5af5
Sha512	73d4a269b70b06d18abd603456b5f1d9edeb2ec1a0c8f419edfd1ce9edc5d3442317230b2a77b4f48af58ebfc846366f4dea694e4a8f23c1f9b2e9948f8a60b4
SSDeep	24576:2fxK1PcpukylEL3CJEdBPHjzWO1UauftimpvpYe0DZp52lHF6Y5mJYAppfSKMxAL:2QSdDSidBLZUamiuX0Df52lMUlltQ
TLSH	06B55C636A50600642B5A8FABEBD5E37795F340D102AD98EFFD30B86E51E6F44802D1F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1

bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:ps1~T1027~T1059.001

Shape ole:doc>scr:ps1

malicious 2 nodes

Deobfuscated PowerShell UNKNWOWNmalicious

"$env:huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"$env:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential