Malicious
Malicious

63c26f83ee36715685c0dcaf57794283

Share on LinkedIn
Print
VBScript
MD5: 63c26f83ee36715685c0dcaf57794283
Size: 131.07 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 63c26f83ee36715685c0dcaf57794283
Sha1 565ae581c7f208074d0d4f2b95db218a8c6c7edb
Sha256 5f7ca145520351f85350d8a68b9188825cf0f9ef3868bbf32ec7fe703ca049ec
Sha384 72cfea56659306563fc886908322e9d8ba998a83271724a10ea24af537900eb72fab79c33461734bc2dcc4ed32398ddd
Sha512 6270a7f10c0a0839e13d7bb92473faf92fcc64dcec4138509dea49e525d650b22ab2c1297d336449bd65ed15154892d4e7ae52025d000c408d0c3d3495711d42
SSDeep 384:W173OItkVj20u8aVuIfilQJTtWl38vN3IdXgtz5JK0truVvpJerV0RzdBJW7xkK3:wPtAi0d5pr3i36qmC
TLSH F6D34F2344F6C681EBACC2F0897DDAA4176A0EDC453D1A793388B1E42D371BD719626F
Root Entry
Malicious
䡀䌏䈯
䡀䈖䌧䠤
䡀䌋䄱䜵
䡀㬿䏲䐸䖱
䡀㽿䅤䈯䠶
䡀䈏䗤䕸䠨
䡀䓞䕪䇤䠨
䡀䕙䓲䕨䜷
䡀䌍䈵䗦䕲䠼
䡀䒌䓰䑲䑨䠷
䡀㼿䕷䑬㭪䗤䠤
䡀㼿䕷䑬㹪䒲䠯
䡀㿿䏤䇬䗤䒬䠱
䡀䖖㯬䏬㱨䖤䠫
䡀䘌䗶䐲䆊䌷䑲
䡀䄕䑸䋦䒌䇱䗬䒬䠱
䡀䇊䌰㾱㼒䔨䈸䆱䠨
䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
䌋䄱䜵㭾䆬䌷䑲䕤㹼䕤䏤䈯㡯㤁䠆
SummaryInformation
file_BCCF48676D0F
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
63c26f83ee36715685c0dcaf57794283
Malicious
.executed
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path ole:doc~T1027~T1059.005>bin
Shape ole:doc>bin
malicious 2 nodes
Path ole:doc~T1027~T1059.005>scr:ps1~T1027~T1059.001
Shape ole:doc>scr:ps1
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙