Malicious
6f67aa7731a5e7ee0aa4a2523e64e1fe
VBScript
MD5: 6f67aa7731a5e7ee0aa4a2523e64e1fe
Size: 27.49 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
27.49 KB · 27,493 B
Hashes
MD5
6f67aa7731a5e7ee0aa4a2523e64e1fe
Sha1
83fc6f27cf474ee554e6d8eeb3dfef1708afc907
Sha256
7a371062478c41955fef40544dfe1930c1f4e174e5746021f8b6aeaa7522d2d4
Sha384
69203564c61a7bc8a10314eadded9b1d4cfcb67d83358b418376794a5104c40d041d19257c807a0d2490bdf3330ce02f
Sha512
2d3765234be05e9853b8847fc4325fb04ff14a136db132fa125475aa30a34497c3fb4cd27bf2dd5c18d748ce3f1bf439e3a98c3218ff5b38ae7ba3fd192a43ad
SSDeep
384:Kj3cSCaCgh9hCv3Zxs6bb0Bq36qOgJ+/cMWwIsIrFk3ixuRlA8LSUoWKoFv+vrtS:Kdj8WQuA1/aN/8vpcB+NdU
TLSH
BEC245D244454BF4297D7662F19BE81799104373783DA90E3B8B91CB3FF66108A8ECB9
Detection
Symbol obfuscation
High
2 malicious · 2 files
VBS6f67aa7731a5e7ee0aa4a2523e64e1feT1027 · T1059 · T1059.005
VBS6f67aa7731a5e7ee0aa4a2523e64e1fe.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
2 malicious · 2 files
VBS6f67aa7731a5e7ee0aa4a2523e64e1feT1027 · T1059 · T1059.005
VBS6f67aa7731a5e7ee0aa4a2523e64e1fe.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
6f67aa7731a5e7ee0aa4a2523e64e1fe
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.