Suspicious
Suspect

68f0b67fc3dee548bbfd5ef3bea3bd01

VBScript
MD5: 68f0b67fc3dee548bbfd5ef3bea3bd01
Size: 660.27 KB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 68f0b67fc3dee548bbfd5ef3bea3bd01
Sha1 6ab570b2077012fb6f2dd7ccfd184907a8afdeae
Sha256 342c8cbca7f6c97acbd974963ad9909b9864cf0643244f4565593d8b67b893f1
Sha384 eca6250eada085486bc681d32b5c06eebb23a87480bbbcc72b25cd9f2c87646cd01cb73eba40d75ba8b8f712cec8d50e
Sha512 45e1722b7ba11ec6087a7a230c1ec8ee2c5abd492958e0f5d96e95bcffd3daf722512f653660d770045eb2174bae456bccd786a8de6ca2dc991a5136ffd392a6
SSDeep 12288:lIfkJ8RbLnOqwllUi4Ti3ymNX1MKBwFd1QWpq3Vols5T+:688R3nnwllUBTi3ypKBwFdKWpq3Vols5
TLSH 53E49E69539140BCD0B6C2B0C2C7823BDAB27C5665B5423F03D76B6B4E23791ED2EB19
PeID
Microsoft Visual C++ v6.0 DLL
Overlay_be9a60d3.bin
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1
Name Value
Info
PE Detect: PeReader FAIL, AsmResolver Mapped OK
Info
Overlay extracted: Overlay_be9a60d3.bin (303 bytes)
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Overlay_be9a60d3.bin
No malware configuration was found at this point.
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
68f0b67fc3dee548bbfd5ef3bea3bd01
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙