Suspicious
Suspect

6eea0708eb348798610bf6324caba37c

Share on LinkedIn
Print
VBScript
MD5: 6eea0708eb348798610bf6324caba37c
Size: 7.53 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 6eea0708eb348798610bf6324caba37c
Sha1 97b8d970dfe25cc67e0ace71a5cbdf086d3b9bd8
Sha256 d43c2eb968eaefcb8d5dc0574b562de391f5c5e025d118842bc7cc65f402909c
Sha384 e0b8facf5047705d003aa2d4c12730d2a55560359b64fb3e527fb1b861aa02c70cbe62ca2b5f56fe20f2ddc488c8435c
Sha512 9715284e1bef837a0f247849b9de38300f9e5c1163a29f7a2e533a0d1106767a0ede5d9b1983ecd97e1495fee2b9f0a46eec76963334e04e4ebb4821a408e2f8
SSDeep 196608:5u11MftV2BNhzY01mQn1uJhAYBUxSVHjLkoM2HcaXhU:k1vThznL1urBB8on2EcaXa
TLSH C97633C0CCBB1793EF58D409E3B22A2A7F620D1516479D2D616E76362FE32E481276DC
App
gamma65951
[Authenticode]_9be44668.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.gfids
.tls
.rsrc
.reloc
Resources
WEVT_TEMPLATE
ID:0001
ID:1033
RT_ICON
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
ID:0005
ID:1033
RT_STRING
ID:0001
ID:1033
ID:0002
ID:1033
ID:0003
ID:1033
RT_MESSAGETABLE
ID:0001
ID:1033
RT_GROUP_CURSOR4
ID:0001
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
Installer-55-98-2-28.dll
AppInfo
Launcher
license.txt
Installer.55-98-2-28.ini
splash.jpg
splash.jpg.exif
splash.jpg-preview.png
appicon.ico
appicon_128.png
appicon_128.png-preview.png
appicon_16.png
appicon_16.png-preview.png
appicon_75.png
appicon_75.png-preview.png
appinfo.ini
appicon_32.png
appicon_32.png-preview.png
appicon111.ico
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 6 STICH kept: 1secondary ignored: 5
bin 3img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs>scr:ps1
Shape scr:vbs>scr:ps1
2 nodes
PE Layout UNKNWOWNsuspect
Memoryhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙