Suspicious
Suspect

3c136f72cfc2006f5e9c0f652347e520

Share on LinkedIn
Print
VBScript
MD5: 3c136f72cfc2006f5e9c0f652347e520
Size: 507.9 KB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 3c136f72cfc2006f5e9c0f652347e520
Sha1 9588afe462fa011f2c428e4af83da5d8c1fdec3f
Sha256 e9f2f42ea3611096879f4152a7d78bb3a78a4dbead1c3b7e366dce485207551f
Sha384 8570be57a0899129e90fd756145ff8c33b5148739f181e863b415e7ec45bec2fbbb2e4a044e4f013d00a7af12b553969
Sha512 36ef109cd27f640f70ac30d7a218e0c7b610fffbbbbea052dc4da7743870b7a9ac25bdb978964b780b2717e108bf24ec45858917043b91b8907267769866acb7
SSDeep 12288:hVRsGEHP1Ifk7FM2RwwkXdC0UDPEVOlDcZtYUV00NqozOT:hVwvSs7FM2RwbCBHD9oBqoaT
TLSH 0BB41221BA858373C5120373990FA3D00F699DAD0BB70283261DF59C1EB19B676F79E6
Root Entry
䡀䌏䈯
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䘌䗶䐲䆊䌷䑲
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
File_1_hhc
[Authenticode]_40598ab2.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_STRING
ID:0007
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>scr:vbs
Shape ole:doc>scr:vbs
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙