Malicious
Malicious

15b622081c2b1e0696d3473d65f17b61

VBScript
MD5: 15b622081c2b1e0696d3473d65f17b61
Size: 28.96 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 15b622081c2b1e0696d3473d65f17b61
Sha1 3a486a98a5e7927a2cb232da916666b052e2e4d4
Sha256 3693e5bd3b1a5747588abb021fb96364e5528483c036f32672c8118df4634150
Sha384 6a9e90e9169602df4ee18c9ba876e88e9b3f93db2257a4b2ecdad8e91ebd9dc129d54693bef08ff28af82589bdbed240
Sha512 065773f9e009521a7a89e00fa2760423d411374771d4a9d902568edcded11a201bc78f282deec4f49c2857a363a05abe932f33d45976468d0ac075c0cad20662
SSDeep 196608:0ipoFWZeRs5yBqw+FseqYwiEEgXnYQcMdjKLsy2tVJiY:pJaoJqY9Ef9NdjKoy2
TLSH D4573A0726B1A40AFA74C0788E52D8F30A26759F462075F776DC897523D2C672FFC9A8
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
PDF @0x01995452
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll>scr:vbs>scr:ps1~T1059.001
Shape pe:dll>scr:vbs>scr:ps1
malicious 3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
PDF @0x01995452
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙