Suspect
00d3c17953afb258440c9eb9e15e30b6
VBScript
MD5: 00d3c17953afb258440c9eb9e15e30b6
Size: 14.29 MB
text/vbscript
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 00d3c17953afb258440c9eb9e15e30b6 |
| Sha1 | 23902109c0301caec968660ea08cd5cd165354e2 |
| Sha256 | 52a1f9aebd6d8f42ed0fa9a36c8c0cea56dccaa7ab941a62c7d70be02479f6d9 |
| Sha384 | 7c510687af5d3e58244200d9f803ca5447caec4049d5578cd061fc24e1e4755e9c496d1cfc4168e58cfda3c4ce7b0261 |
| Sha512 | 899b65a29a4e4f2acc9e6e142560391ad72fcbee7566c53133bbf5e1bfdc960fd5ec7d6b4d4c254ac58709500e42628e099e521d37b9768aa03256537ef66c97 |
| SSDeep | 393216:Ghd01M3OWld0GIAh6OK9XMCHWUjX6cuI3/PGTAI:G7RdtsO0XMb8X3H/O7 |
| TLSH | 1CE6335C6EC402EFD9B3003CEEF26699E926B4724731CE9F17AC92622E530D48D3565B |
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 1secondary ignored: 2
bin
1img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>scr:vbs
Shape
pe:exe>scr:vbs
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_0e73a00c.bin (13990489 bytes) |
| Info | PDB Path: t$mn |
No malware configuration was found at this point.
You must be signed in to view YARA rules.