Deep Malware Analysis of f5bc7bd9c55012072f8760b377594eff | md5: f5bc7bd9c55012072f8760b377594eff | Html | SOS: 0.25 | PowerShell | Batch Command | PowerShell Call | WScript.Shell | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace | T1059.001

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Low

MD5	f5bc7bd9c55012072f8760b377594eff
Sha1	b82028f00ea85fcb4ad5af0c6d52e956597e73da
Sha256	95cc71c5246d0cd7501801374354157f495002999ec8b0e372cda28aa31782d4
Sha384	ba58f47a3966bb7b4477664e8358202480f50c16639014bfbc93fe6b47c6088564c4e31e7e1709b989e46ff9e0bfa666
Sha512	6e94d0e45ecf27eb77e94a0346c51cd73ecf6bb700576033cb06964923ba048afdcf966c3c9618250cf58821a89e021025619429c951bf627a864e01cfe8e170
SSDeep	384:daC7T9mDR0uFZVcddbUrwVeTXsOBU7EkCZwQn+BfDdSemDIzEvwesM2:cUslfdnMSsSSXT
TLSH	D1C280A67EC71DC68C686F2B6F2217743D042509CC3ACB9A767ABC3216A35F1C735A11

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

3 / 3

Path scr:vbs~T1027~T1059~T1059.005>scr:bat>scr:ps1~T1059.001

Shape scr:vbs>scr:bat>scr:ps1

malicious 3 nodes

Path scr:vbs~T1027~T1059~T1059.005>enc:b64

Shape scr:vbs>enc:b64

malicious 2 nodes

Command (COM trace) #1 UNKNWOWNmalicious

cmd /chuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 4huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential