Deep Malware Analysis of ee3e4d98016b98820877db6601d441ed | md5: ee3e4d98016b98820877db6601d441ed | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001 | Contains Base64 Block | Base64 Block

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	ee3e4d98016b98820877db6601d441ed
Sha1	d03831e4be90b60c1d0f4cde6e0cf972e6f2abd1
Sha256	97b0e0a6af838ab3954ae22ffd5239e7b0712be6e4d585aa2ec74df1f2e1c34b
Sha384	593de3d35ef463202b3f85f2fec3b8b27415f092bd1208be4aa4c405ea56685736c6b211346d8b0788e0df5d951b7efe
Sha512	1aea6d311c3a221109259794201184fddca7f3ea4c862c0d16c0a0e1f9c42bb37cde48aa390614017d6b61e0f607cd820f82e507e98d6449f028a5e4aedccda3
SSDeep	24576:/hC7EZRiL9UDHaOXuPqEpc9XSySSIaVOtatWZmIeACw6X3AL/43:/9/tEpMXSyrk6TnXn
TLSH	2A3523D022109DE34B58D3FA6387B76C22A6CAC58DC9901E9394D27B077DB63562B07F

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential