Malicious
Malicious

4f87190a4d9e9734666e8d4cc30e9ed5

VBScript
MD5: 4f87190a4d9e9734666e8d4cc30e9ed5
Size: 1.28 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 4f87190a4d9e9734666e8d4cc30e9ed5
Sha1 e610937e894dcdcbdffcb9dc40f9ee426dd1e4fa
Sha256 2f06ba5ddac4670091df7015f9b98d5db9f616a326af8fe788f98890f3957536
Sha384 3bcb4db90d9998be1b5ccd77c00005927b5fe0affa73c242b63d09ca7ff221db35a13c69556265e080d77efbb7da8467
Sha512 ba6297749d5af17edc24e555490fe5540949f1baa557269bf0e4ddf3e26691c6941e8a81333bb42e610d8d094ca899590bcb5652a607fb82e8ad85fe57014c11
SSDeep 24576:1xUZ2uFwi0sRpe5Kg32ennjjvvDbBlpuCDliyq0RoXAjYKnpV8khP8WMNk/:15VJmennjz7bm4EAjp2khqc
TLSH 8C453361983A3A7E0EFD91F1387B1F083AA41FD1C4E6E5D072AD94CB4F57A518813D2A
4f87190a4d9e9734666e8d4cc30e9ed5
Malicious
[Base64-Block@0x0000027E]
Malicious
[Base64-Block-Decoded]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block@0x00000245]
[Base64-Block-Decoded]
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path scr:vbs~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape scr:vbs>arc:gz>scr:ps1
malicious 3 nodes
Path scr:vbs~T1027~T1059.001>scr:ps1~T1027~T1059.001>enc:b64
Shape scr:vbs>scr:ps1>enc:b64
malicious 3 nodes
4f87190a4d9e9734666e8d4cc30e9ed5
Malicious
[Base64-Block@0x0000027E]
Malicious
[Base64-Block-Decoded]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block@0x00000245]
[Base64-Block-Decoded]
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙