Malicious
Malicious

5f7eb3c1ac0f73aa2836f14ecd5c31cd

VBScript
MD5: 5f7eb3c1ac0f73aa2836f14ecd5c31cd
Size: 105.98 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 5f7eb3c1ac0f73aa2836f14ecd5c31cd
Sha1 fde5d0f6d04ab8d1cb516c1e000b81d68c8e1d6f
Sha256 77cb19d8ebb05aca9a7b7ccddda6630d594b7176cf113d09cf023d90bc3f39d1
Sha384 cdf8dd45cec19606b35191ba423c3356a7b0f232878d6ca8c121ba9c6e7b2822b4e9be7bf2ed924fae5f6aee3be44617
Sha512 742ad86a59e681a6570e18a49ea3b1bbb67d72921e38765658eab14bdb232b3b6016d14ee17ccbebf099fbb784497581759f75fc9471fc68c0f43750192d210f
SSDeep 3072:FfxEtjPOtioVjDGUU1qfDlaGGx+cLYIxgus+MM4/yIaOxuC1x3nVk/bORjT6zlIu:VxEtjPOtioVjDGUU1qfDlavx+WYIxBHC
TLSH 42A3A401B296C626D5584B354CE6C7E93B31FC059FA65B0B3248B31E7DBAF90D922362
5f7eb3c1ac0f73aa2836f14ecd5c31cd
Malicious
Root Entry
Malicious
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
Module1
Malicious
[Decompiled VBA]
Malicious
.executed
Malicious
__SRP_0
__SRP_1
__SRP_2
__SRP_3
_VBA_PROJECT
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
5 / 5
Path ole:doc~T1059.005>scr:vbs~T1059.005
Shape ole:doc>scr:vbs
malicious 2 nodes
Path ole:doc~T1059.005>bin
Shape ole:doc>bin
technique2 nodes
5f7eb3c1ac0f73aa2836f14ecd5c31cd
Malicious
Root Entry
Malicious
CompObj
Workbook
SummaryInformation
DocumentSummaryInformation
_VBA_PROJECT_CUR
Malicious
PROJECT
PROJECTwm
VBA
Malicious
dir
Module1
Malicious
[Decompiled VBA]
Malicious
.executed
Malicious
__SRP_0
__SRP_1
__SRP_2
__SRP_3
_VBA_PROJECT
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙