Deep Malware Analysis of f4dce608fa787ea68cb576b44621213f | md5: f4dce608fa787ea68cb576b44621213f | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | PowerShell | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

MD5	f4dce608fa787ea68cb576b44621213f
Sha1	4fbf27be4bf6c622241f6515be3f6f4c129b79f1
Sha256	e9f1757d4dd8919c701d9e90a971c23e04f87d53560f0d89c81b79d0016f2e6f
Sha384	7905a2481c487b705c2eb992f9898ad6503322225a188448e8122c26f59e263878e32963060298a0653033dbbfc53165
Sha512	b038a5210d193c46b17a0640aeba829b2f5de6a25e0c92f3aa23786240f762ab85bb5b109da2c499be8e85cf65173f132af1e29dadf2ca03cf691a6146ae7549
SSDeep	24576:MFSuBK3opBpplKck5yzLEj6GP3cwLYksBgjDu7FfyohH1lU0wXRM3Nk9:MvK3o1plN9LI6BwsviOrDoyU
TLSH	E24522AD6C238BFC4BEA9306A1112C5A8A790DD43C1F559645E6EDC216EFF0A4CDFC84

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005

Shape scr:ps1>scr:vbs

malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious

line 9huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential