Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 367d51c78359d4d4366d8b4dccd3bc1d
Sha1 65b9cd72cb10266d93bc38f23108b0d38aabdcf8
Sha256 a613c9f0e38973c956ea867fc81b823bc994355a90f2cf42d57a294fb1625b3a
Sha384 02d8f897137ac0af6756d0e41c0a8ceef3f10e8f949ab116f4ed492a5da488eb6ff42171dd12fe5f24853d43523f458f
Sha512 2356508b536e3de2dae3e973527e4602494e19f7674cded17ab529384565afddc5bb24b9bf5a9fd8b004302f1fe59798512f006492016e6b0106658b7c50e60e
SSDeep 49152:7vPvPvPvPvVv/3vYxE0bsdpEl8/eN9MsnmqLtqW2zbBre60N:OxEAp8KmqLkeV
TLSH 8EB55C636690610542F554BEAEBA5E3F294F74091016D94EFFD30B89F42DAFA4C02E2F
367d51c78359d4d4366d8b4dccd3bc1d
Malicious
Root Entry
Malicious
䡀䌏䈯
䄦㡥䆾䅤
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䌋䄱䜵䁾㦴䛕䒉䠐
Malicious
䌋䄱䜵㳾㢓䀳䍒䙼㴬
Malicious
䌋䄱䜵㳾㢓䀳䍒䙼㴬
Malicious
.executed
Malicious
.subscript.vbs
Malicious
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䌋䄱䜵䕾㫳㦪㣵䛉䉆䖃
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
LGuVuFis
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 2secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>scr:ps1~T1027~T1059.001
Shape ole:doc>scr:ps1
malicious 2 nodes
Path ole:doc>scr:vbs~T1027~T1059.005
Shape ole:doc>scr:vbs
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
367d51c78359d4d4366d8b4dccd3bc1d
Malicious
Root Entry
Malicious
䡀䌏䈯
䄦㡥䆾䅤
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䌋䄱䜵䁾㦴䛕䒉䠐
Malicious
䌋䄱䜵㳾㢓䀳䍒䙼㴬
Malicious
䌋䄱䜵㳾㢓䀳䍒䙼㴬
Malicious
.executed
Malicious
.subscript.vbs
Malicious
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䌋䄱䜵䕾㫳㦪㣵䛉䉆䖃
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
LGuVuFis
No malware configuration was found at this point.
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › .executed › .subscript.vbs
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › .executed › .subscript.vbs
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › .executed › .subscript.vbs
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › .executed › .subscript.vbs
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
367d51c78359d4d4366d8b4dccd3bc1d › Root Entry › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › 䌋䄱䜵㳾㢓䀳䍒䙼㴬 › .executed › .subscript.vbs
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙