Malicious
Malicious

66c671e994bd7d61a1b1811ed46a5dbe

VBScript
MD5: 66c671e994bd7d61a1b1811ed46a5dbe
Size: 190.08 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score High
MD5 66c671e994bd7d61a1b1811ed46a5dbe
Sha1 21f3acfe4c2372f3947cec3344f4c7458335472b
Sha256 1d79ab0c2d0183fcfa2772b008c4f146ec0c83000865a1bb2be2c8209d0abb88
Sha384 1c5b2ae6c49a81f084e0286c6cbd05a07cd98bfb005dd5e116c5fbeafe46e6c2d4759bc4b6a27e0678aa22b38308c8c3
Sha512 9bef4da0d28282c9529fb886477ccfb804c1da007828ff12b82badf74274dba51b383e1c16fff2778243b3512075fef05124746ae6ed0b0883cb6c0e83679d54
SSDeep 1536:YqTPHf/w8cwIKsTq1whxyj7fvUAF/cJ1CfMEbpbLWPY5bPB6jy+OTsqbq3G8TGZJ:r5MTYaWaAwY
TLSH 9D04E08498A5C0C0B84B38C1C9D430861C353E7BB51BEE59353E76F97A6688D5FA4ACF
66c671e994bd7d61a1b1811ed46a5dbe
0x0000132E.svg
0x0000132E.svg-preview.jpg
0x00001581.svg
0x00001581.svg-preview.jpg
0x000016BF.svg
0x000016BF.svg-preview.jpg
0x000017E6.svg
0x000017E6.svg-preview.jpg
0x00001A8E.svg
0x00001A8E.svg-preview.jpg
0x00001CBC.svg
0x00001CBC.svg-preview.jpg
0x00001DE0.svg
0x00001DE0.svg-preview.jpg
0x000020D0.svg
0x000020D0.svg-preview.jpg
66c671e994bd7d61a1b1811ed46a5dbe.deobfuscated.vbs
0x0000160E.svg
0x00001A45.svg
0x00001E16.svg
0x000024C8.svg
0x000026AE.svg
0x00002A60.svg
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005>img
Shape scr:vbs>img
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
66c671e994bd7d61a1b1811ed46a5dbe
0x0000132E.svg
0x0000132E.svg-preview.jpg
0x00001581.svg
0x00001581.svg-preview.jpg
0x000016BF.svg
0x000016BF.svg-preview.jpg
0x000017E6.svg
0x000017E6.svg-preview.jpg
0x00001A8E.svg
0x00001A8E.svg-preview.jpg
0x00001CBC.svg
0x00001CBC.svg-preview.jpg
0x00001DE0.svg
0x00001DE0.svg-preview.jpg
0x000020D0.svg
0x000020D0.svg-preview.jpg
66c671e994bd7d61a1b1811ed46a5dbe.deobfuscated.vbs
0x0000160E.svg
0x00001A45.svg
0x00001E16.svg
0x000024C8.svg
0x000026AE.svg
0x00002A60.svg
No malware configuration was found at this point.
Trace COM ordonnée UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
66c671e994bd7d61a1b1811ed46a5dbe
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙