Malicious
Malicious

15b622081c2b1e0696d3473d65f17b61

Share on LinkedIn
Print
VBScript
MD5: 15b622081c2b1e0696d3473d65f17b61
Size: 28.96 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 15b622081c2b1e0696d3473d65f17b61
Sha1 3a486a98a5e7927a2cb232da916666b052e2e4d4
Sha256 3693e5bd3b1a5747588abb021fb96364e5528483c036f32672c8118df4634150
Sha384 6a9e90e9169602df4ee18c9ba876e88e9b3f93db2257a4b2ecdad8e91ebd9dc129d54693bef08ff28af82589bdbed240
Sha512 065773f9e009521a7a89e00fa2760423d411374771d4a9d902568edcded11a201bc78f282deec4f49c2857a363a05abe932f33d45976468d0ac075c0cad20662
SSDeep 196608:0ipoFWZeRs5yBqw+FseqYwiEEgXnYQcMdjKLsy2tVJiY:pJaoJqY9Ef9NdjKoy2
TLSH D4573A0726B1A40AFA74C0788E52D8F30A26759F462075F776DC897523D2C672FFC9A8
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.tls
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:0
ID:0-preview.png
ID:0002
ID:0
ID:0-preview.png
ID:0003
ID:0
ID:0-preview.png
ID:0004
ID:0
ID:0-preview.png
ID:0005
ID:0
ID:0-preview.png
ID:0006
ID:0
ID:0-preview.png
ID:0007
ID:0
ID:0-preview.png
RT_GROUP_CURSOR4
ID:0001
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:0
PDF @0x01995452
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 1img 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:dll>scr:vbs>scr:ps1~T1059.001
Shape pe:dll>scr:vbs>scr:ps1
malicious 3 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙