5763011551b6e7cc637d80851409a6c3

ZIP Archive

MD5: 5763011551b6e7cc637d80851409a6c3

Size: 46.17 KB

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	5763011551b6e7cc637d80851409a6c3
Sha1	f4ac58e895c791702524a3e6b785b8c4f4945de6
Sha256	fb8491f3beeca97f5167549e5be6ab8caee26b67f5afc5d4d89b0f8d832c3e95
Sha384	32efe262fdad27eadd0ca930c218e70c488b9ca020e9d21e788d694d8b9fa0eb93292e344256a87c5355cf25e542411c
Sha512	8c266bdef49ca4a2ed4f2c6a457a1feb9330bf8a37b74a9839c58b57a0b58d7abcf35ca4bc414f50312c371e14d2da3e1221075e4bd276ba3030d30ada1e7343
SSDeep	768:cbF0N1rI8PWRoeFc0LkDaROCG2rvT1mCG6h2C/+8RMv4Rwt11TmduXBNbMQxYLIE:cx0NtI8+RF1LksxG2rvTrGm2CXRFRwti
TLSH	ED23CF56C1C01193D5A7C27C21BF069CDE7AEB4A5129B24EB30DB0805E97C799B363BE

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 1secondary ignored: 3

img 2bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059~T1059.005

Shape arc:zip>scr:vbs

malicious 2 nodes

Command (COM trace) #1 UNKNWOWNmalicious

stahuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Command (COM trace) #1 UNKNWOWNmalicious

stahuhuhuhu

5763011551b6e7cc637d80851409a6c3 › vbs.vbs

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

5763011551b6e7cc637d80851409a6c3 › vbs.vbs

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.