Deep Malware Analysis of f68cc2f19e6e207ffacb6a3b92b5c9e5 | md5: f68cc2f19e6e207ffacb6a3b92b5c9e5 | Contains Base64 Block | Base64 Block | Base64 Payload | SOS: 0.19 | PowerShell | Batch Command | PowerShell Call | WScript.Shell | Scripting.FileSystemObject | Shell.Application | DeObfuscated | VBScript | T1059.005 | Obfuscated | T1027 | T1059 | COM Behavior Trace

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Symbol Obfuscation Score Very low

MD5	f68cc2f19e6e207ffacb6a3b92b5c9e5
Sha1	863573468cd5d8ceada119de0306d2b036222dd4
Sha256	3199b8a0398994b0126a1e642618b5ba903acaeec64afd48f59a7bffd9045971
Sha384	e39324e4adc0841e0de7e5969f4cc3adc2e791ae23faffad5add477ee9aeea8b7ebb4782cd97af12fbe3fe0ea24af858
Sha512	9f869d651f9d0306ab735aefb7765b31ec75ddb02e08fc8862a5d6d3474aeb754ee64a48fb5c5e68067425ece6920e29d4a628c821a749ed7f7934f85fb91271
SSDeep	49152:05bMGDnXusi7iypeP1Vodu2nmg7/2cauYWLWKUM7UlSsmEdHOav3Zu/JFFCUqeNk:M
TLSH	DAF689331AD47D45E71F202BF8E92A011EE13AF3011BFDB57B81759A051AD708BD26AB

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059~T1059.005>scr:bat

Shape scr:vbs>scr:bat

malicious 2 nodes

Command (COM trace) #1 UNKNWOWNmalicious

wschuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 4huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential