4e7bcfb948c256af07bc338c3f9a4660

VBScript

MD5: 4e7bcfb948c256af07bc338c3f9a4660

Size: 963 B

text/vbscript

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	4e7bcfb948c256af07bc338c3f9a4660
Sha1	7f2939563badbbeafd1d32b1baebd993c40d11d9
Sha256	c915cbe413734215dc0da1cc94f1d4e29561986fbf00ff806ed7f0b005f4403f
Sha384	8bd01934f230f60254434a11d6d23ceeb43e34649c1320f559fae60bbd294d43ae0099df8d2cd5fcc2b256b85a3a9140
Sha512	a49d2bb289be37ed7a417c9e6bf4148497619ec5a37ec5e7f1fbdc9358aa4edbd4073eb267f727d92f7aeaee2fdd689450a9facedd782ae029df2fdbb8f46252
SSDeep	24:83FUf8dUxwJMcb5H0CGDXJ9CIizXpRnpF4hMTCUPAN5iDV/hrMuTk:8VYVCGbJAbfaUPANYRNMEk
TLSH	C411ED25D801FA530B0397F587AE88ACDE3EE46B0504A545750CDD0AAF216A8B1203E2

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059~T1059.005~T1105

Shape scr:vbs

malicious 1 nodes

Config. Field	Value
URL (COM trace) #1	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

"C:\Ushuhuhuhuhuhuhuhuhuhuhu

Dropped path (COM trace) #1 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

"C:\Ushuhuhuhuhuhuhuhuhuhuhu

4e7bcfb948c256af07bc338c3f9a4660

Dropped path (COM trace) #1 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

4e7bcfb948c256af07bc338c3f9a4660

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

4e7bcfb948c256af07bc338c3f9a4660

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

4e7bcfb948c256af07bc338c3f9a4660

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.