Malicious
Malicious

6827b559610c91ad4a9d95ab4478526c

Share on LinkedIn
Print
VBScript
MD5: 6827b559610c91ad4a9d95ab4478526c
Size: 197.49 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Medium
MD5 6827b559610c91ad4a9d95ab4478526c
Sha1 a65567dc74f72251768f72ee0e84d20fa3f462f3
Sha256 7882ff736d07ea369a2aaf6b358b99a6e6913ab1506ff462538b84c43ea282ba
Sha384 029dec60aacfc33db2722fd0b8619f9ad84b8fa34254aa435f291390df08b87075102abaf0760beb5365175791795f9d
Sha512 c2bedd3320ff68a4125c1baecbdadf3bba1c0937ab3c0f52c3ac7c507360c9b668cf58c1b6639565313921566c761626cd1110b5b7d06eec484e0786acda4477
SSDeep 3072:38W9gH8788QBT4Z+9s5rbjMT+b42JSrJaU4TEQsl2eCJcWnEynKwiFE:3jgH5pBTCOwXM6b4USVwEQs2rJcqnDF
TLSH 1414CE62EBC401B9CED0CB0833594F2539E1496984E71306AAFD7C4DA2EAF6553FB874
6827b559610c91ad4a9d95ab4478526c
Malicious
6827b559610c91ad4a9d95ab4478526c.deobfuscated.vbs
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1047~T1059.001~T1059.005>scr:ps1~T1027~T1047~T1059.001~T1059.005
Shape scr:vbs>scr:ps1
malicious 2 nodes
Path scr:vbs~T1027~T1047~T1059.001~T1059.005>scr:ps1~T1027~T1059.001~T1059.005
Shape scr:vbs>scr:ps1
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙