Malicious
VBScript
MD5: 27659214cb4e42fbb23fb86119cd3d4c
Size: 221 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 27659214cb4e42fbb23fb86119cd3d4c |
| Sha1 | 8dc5a01ab85b940d16f3afdb06c8f543b15b8c4f |
| Sha256 | aa02cc4f984a79fb15b8be511875787abc6eca1d973902ce75cf1f21e54c92b6 |
| Sha384 | b59e56cca1659dd92f7dc5f709fd26adbf49ac1649ac055bd003c4731d4f7e2387337b3465a5b2c0dd54971caa916aa3 |
| Sha512 | b1f75d4f7dc0ba04f034349b5ed9bd4c499a14a119813efea5abb0fd9ab139ff001603a423218759d6404d4392eb5a8222dce05aa894535b05a2255636190e9a |
| SSDeep | 6:j+q9NqcN7fBMbHZGnc4KFrFHJhzNEEHZtyJHb8n:KqacN1SCAFHJhRE0Qy |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005>scr:bat>scr:ps1~T1027~T1059.001~T1105
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
| Config. Field | Value |
|---|---|
| URL in PowerShell #1 | http:/huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
Command (COM trace) #1
UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential