0dd582fd917694c6aa99e09ec1c7019a

VBScript

MD5: 0dd582fd917694c6aa99e09ec1c7019a

Size: 1.07 KB

text/vbscript

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	0dd582fd917694c6aa99e09ec1c7019a
Sha1	2c175c0e70c2ec7d12d62238115506efe87b7477
Sha256	6a514da7cac790d657c1785c71c2d5efdbacadd117e3220f9221c40e245d9508
Sha384	6917e791a7ec1462d5fa57161a086d01f806f72b347d92f40709f5101302968179a35a2dde0c51ab32d6fc5f2db70180
Sha512	5057f6a288888d6c4a2820dea5b40a73eaf9cf1c874b861ada84d66a2257d00495d40718f88413c819a8c476ce1a0657653fcb6c7e23b859b9dbe61fea22b1c1
SSDeep	12:/B5E+2l++OadYDSAxvOAYaYhhvDzERQ3cC8OFQSCdOLb2ErHaTOsyzE5VBi8InE7:/c+wLFduF+rCmizOBrwO9olydibR
TLSH	BE11729FFC03D6414A7021D2862C9A1AEFAB312B27129010BC1DE81BEB3077C9AE45D3

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059.005~T1105

Shape scr:vbs

malicious 1 nodes

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

Event-Manual.vbs

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Event-Manual.vbs

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.