Malicious
4a4e90d2347d1f3679d31ce220b96476
VBScript
MD5: 4a4e90d2347d1f3679d31ce220b96476
Size: 9.11 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
9.11 MB · 9,106,344 B
Hashes
MD5
4a4e90d2347d1f3679d31ce220b96476
Sha1
a0e6e983f1a0eb48fec76213467be630b78c1aef
Sha256
c91cf237e08c403c8c6a72cc5aaea8983134965fd855ee0ab731ba3127f6b838
Sha384
3403a87fcdcc382bc66aeb7e2a6695e080361378a6491a134c0a388fe632d88091adf0f3eb69352f4eae92c5dd9f6942
Sha512
2e02eabc5a85f1e9a711fd6631398f422d07a802fb34ae180d9246420046c4c5b6c47265f9a8383e65da7481e15852529c52fa55c04d664e3a036e4a5128296d
SSDeep
49152:p4zdzHMqwZDZlaczHm1mMZ0u9YUGgd8QVqWtTsi9JwUqRhzrwwfpfpAuMgV8OhNr:pH
TLSH
0F962332BE94151B05B0473AF05B6673BF768863824C92F68CCDF255368B9D9817F8E8
Detection
Symbol obfuscation
High
2 malicious · 2 files
VBSFisc3351-Recep_CargebknDigi_Firm5657386TLQB_C8JJM.vbsT1027 · T1059 · T1059.005
VBSFisc3351-Recep_CargebknDigi_Firm5657386TLQB_C8JJM.vbs.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
2 malicious · 2 files
VBSFisc3351-Recep_CargebknDigi_Firm5657386TLQB_C8JJM.vbsT1027 · T1059 · T1059.005
VBSFisc3351-Recep_CargebknDigi_Firm5657386TLQB_C8JJM.vbs.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Fisc3351-Recep_CargebknDigi_Firm5657386TLQB_C8JJM.vbs
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.