Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 04fd4098ce4fe07ee8e6ad3c86233119
Sha1 1e189dc2f717991310977935db14b1b71caf694e
Sha256 a52e38000528fb3c60e7325db46f43c66120b61446024edcd9f7ebbf069a67f8
Sha384 dcfa08f5363650e7fb1bf75015711168bbcf6fb373b05f0fe249fca468daa7a3d01a051ad2855d9ed4bab51153841294
Sha512 7d597e34dff4fc659f37ea7b432ee72fb5e024a61e32fa89f36513c74886a5adc52cc175abb5b9f66f2928cc0cded5a4e21aebe6958cee033f2f094986ded978
SSDeep 12288:Szhf1dV28dj12N66IV6TbxBPB+kutX55mtpw:Szhdu8M4yU9Ytm
TLSH 56C4E1005D456FA4CBB8EA1C40B9250DE7E00E4F4816A449F7A7BD8EAFF7A4A411F2D9
04fd4098ce4fe07ee8e6ad3c86233119
Malicious
[PowerShell Command]
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:vbs~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:ps1>scr:vbs>scr:ps1
malicious 3 nodes
Path scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:bat
Shape scr:ps1>scr:bat
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
04fd4098ce4fe07ee8e6ad3c86233119
Malicious
[PowerShell Command]
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
04fd4098ce4fe07ee8e6ad3c86233119
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙