Malicious
Malicious

132892cd5a5a59ab26cf37f2423b3d63

VBScript
MD5: 132892cd5a5a59ab26cf37f2423b3d63
Size: 1.28 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 132892cd5a5a59ab26cf37f2423b3d63
Sha1 23e0ccbc7ff4768198fbaba784377fea28602159
Sha256 e3ee5d56ae3281d15eb73228e5cd94d955b4f664ac73de9651a16d034f32c93b
Sha384 42ff98f1457a1ef82523732c3dda59b9a69290296a1678c4c8d0d33faab025d3f3998e19e9ef1bb5ab63bda0f58d7702
Sha512 09f2a3d64f7690cfe11af97688b96bb4213078ee5c6d37032705f0183d1ab4165d06324865d8588ca559b2cbad013af665a60844bcc5dd5a7b0c926dded27eab
SSDeep 24576:3Kj6dX8yBRqIZ96agqb8jf5HGrxUi8ulzZ5B7pfYk4++Xh27Ksqy3T:3dZvxgqbIf5m3fpd/xj
TLSH 554533508B1D64320F05D36816070E2717D05E46E919EBFDB39DB0FAB69E6239E0B1AE
132892cd5a5a59ab26cf37f2423b3d63
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 2
STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
2 / 2
Path scr:vbs~T1027~T1059.001~T1059.005>arc:gz>scr:ps1~T1027~T1059.001>bin
Shape scr:vbs>arc:gz>scr:ps1>bin
malicious 4 nodes
Path scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001>bin
Shape scr:vbs>scr:ps1>bin
malicious 3 nodes
132892cd5a5a59ab26cf37f2423b3d63
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙