Suspicious
Suspect

2518408638fffdc14cd1561cd551eb0b

VBScript
MD5: 2518408638fffdc14cd1561cd551eb0b
Size: 493.06 KB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 2518408638fffdc14cd1561cd551eb0b
Sha1 8783ae2b2156bd27c8ce3257c74bc3791013df50
Sha256 3da8da1092e93b77f43a2769fbceeac273f3252cd6c298de746618e45356b1ba
Sha384 bdb785f21b8826666c5e808bb78f92ccf23c738fa3b06582f16f4d40326de3d00bdf2cf173018940fe1cc92265851b58
Sha512 21725188d7ac005c81e7f3e613f784c3ff04cafaea7b9f62a81cf539146b258e74443a00ca3389bb18da5f44a54192cb6aba07b911852472da8349ac09b2d71c
SSDeep 12288:T13ak/mBXTG4/1v08KI7ZnMEF76JqmsvZQ7S:Zak/mBXTV/R0nEF76gFZQ
TLSH B5A4BF01BAD2C072D57654300C3AE775DEBDBD212839897BB3D61D97FD30190A63AAB2
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft CorporationZProtect v1.4.6 -> * Sign by phpbb3
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:007B
ID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
PDB Path: t$di
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_RCDATA
ID:0000
ID:0
RT_GROUP_CURSOR4
ID:007B
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙