6f361a9777cb7f661ad3c6b4c4112a9e

ZIP Archive

MD5: 6f361a9777cb7f661ad3c6b4c4112a9e

Size: 769 B

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	6f361a9777cb7f661ad3c6b4c4112a9e
Sha1	f9a92e8b7d5ab9469910a1656273cba6ef3667ab
Sha256	d26d2cd679fa7c81b19e6a724f414cedc50769c214d9f4d130fcbb2bd3cad5b3
Sha384	e7f195e388924c5ee06ffe82ac41e505ac428fba87f656306fc2532009d8c154e9fa7bb6b5e53e1db3fdab958f863dc8
Sha512	fee0c83ed8745ff460552392e5053f3db4d2d31cd283fc03f6d0e5150f7f816b85f23e8a8c91b2c7b34052d0032075d5fe17b24aeacff8cccbc92134b75b0cf8
SSDeep	12:5jJ6IOX/9OkUAnLf3nhcc/iRzwJffbeLSlYIU/ZTrHdGlMXHyGk0ziaX:9JaMgn6qtSlIUR3MlUHkKJ
TLSH	0501BA24C70382F3F15FC2B743513741E0F8154729E5AEDD12189295C9B5359E7F0755

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059.005~T1105

Shape arc:zip>scr:vbs

malicious 2 nodes

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

6f361a9777cb7f661ad3c6b4c4112a9e › Event-Manual.vbs

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

6f361a9777cb7f661ad3c6b4c4112a9e › Event-Manual.vbs

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.