Suspicious
Suspect

5e9c5ee0045690d603fd85e313a566fd

Share on LinkedIn
Print
VBScript
MD5: 5e9c5ee0045690d603fd85e313a566fd
Size: 1.95 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5e9c5ee0045690d603fd85e313a566fd
Sha1 259e574cad7b6fee7cf7d33313f7bf0cf707d4d0
Sha256 e5f7bbfc187264336dea5dfebfb5a7dd1e7fcdcc9692db55fbe6eb4d28f027bc
Sha384 9d2f944a256bc4295ffff8173bba75a0dd1bcb6daae76043156436aa9fa93a485fd366559da87aa9588b815634b3fcd0
Sha512 6f2324ca4b86a8fcd73371e82799f5f8099486ea7544055e5f46140c03414ba80f37d84e39a0ade904a21165eaa1d715034f29187b2b3a75be9b597cca5f6cd1
SSDeep 49152:R5WZxhe+7VOJKE0Nox4EZQ0dIgV7jI/3Z/dURee94A2FncaHk:PJKEDxfZQ0qgRIh17rk
TLSH 5E95333A7E032662D9862371C01F83D4ABF95C084FF90163325472996FB5AA9F6B34F5
Root Entry
䡀䌏䈯
䡀䈖䌧䠤
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䘌䗶䐲䆊䌷䑲
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
SummaryInformation
File_1_NisaSrv
[Authenticode]_01296a44.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.fptable
.rsrc
.reloc
Resources
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
RT_MANIFEST
ID:0002
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 1secondary ignored: 4
bin 4

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>scr:vbs
Shape ole:doc>scr:vbs
2 nodes
An error has occurred. This application may no longer respond until reloaded. Reload 🗙