Malicious
Malicious

02d68788bbd86f7df4c18ba9fbdf80ac

VBScript
MD5: 02d68788bbd86f7df4c18ba9fbdf80ac
Size: 38.51 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 02d68788bbd86f7df4c18ba9fbdf80ac
Sha1 c842bcbd2fcc07f1a51f6233c00f9c6b16910352
Sha256 d39142fd261676d1c0ef0b817c44afddc800f6e7b3b1ffa2f2d9a27f548a5095
Sha384 91c795e01b36fc215329a242ed2ee43a049e0f7bc12f42da952e049b3682d5b59b0e6a24dcb4ada4dfbeeba2f024b501
Sha512 7d05db0da535a08c0b25a561935bb61412a2ddeaacd6f6d911099586a6f2e99bdd04d135aa493bd7c8812168317da3185885d3adafccb4abb943dd822cd754bb
SSDeep 384:fF1VVnOKVrFTCvSu9wkv4V723+V65VfRFdqVKVeFiFYqVp:9gUEV
TLSH 8603DA783D808D62579222E50A569E3561F24F5C76480C3CBEFD813A9324C6A5F677CE
02d68788bbd86f7df4c18ba9fbdf80ac
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block@0x00007492]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs>scr:ps1~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1>scr:ps1
malicious 3 nodes
Path scr:vbs>enc:b64
Shape scr:vbs>enc:b64
2 nodes
02d68788bbd86f7df4c18ba9fbdf80ac
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block@0x00007492]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙