Malicious
19fc9d39d09d7641506abcf4dcede2fb
VBScript
MD5: 19fc9d39d09d7641506abcf4dcede2fb
Size: 813.62 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
813.62 KB · 813,616 B
Hashes
MD5
19fc9d39d09d7641506abcf4dcede2fb
Sha1
bba961805c5ba93c65cca50bea5b3f4ec2143ead
Sha256
1bcfd2a841c6df342068c61700196a1e7fb687baacac6e1682e52854fe33dde6
Sha384
aa2e1ef427ad91bcd8646971805d35f3eed575a2fef5eeeb04cf9ce62cd2d038a27719c8f455ca79e0e4ac542c881085
Sha512
ed97720c227749da6a79100724af8b62a7e275e2392b805ed0ef2bd6a9db316f28a398d2001af0a84d4f1c594795d93388ff80c561b18364fcbf22f82d52d8ac
SSDeep
12288:spojPv1O943rN3vnNtv9/gI5WceLuFqBGfDcrFAJo+i9:LjH1O943rNX/beLugBcDcrFic9
TLSH
BC05C0617F983AB69FA8160EE0AE5F0E03F06349590570DDEA196F0F5EFFE44050B1A6
Detection
Symbol obfuscation
Very high
2 malicious · 2 files
VBS19fc9d39d09d7641506abcf4dcede2fbT1027 · T1059.005
VBS19fc9d39d09d7641506abcf4dcede2fb.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS19fc9d39d09d7641506abcf4dcede2fbT1027 · T1059.005
VBS19fc9d39d09d7641506abcf4dcede2fb.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
19fc9d39d09d7641506abcf4dcede2fb
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
19fc9d39d09d7641506abcf4dcede2fb
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account