707f0512d1fa15e03a5c5700bfc11d05

VBScript

MD5: 707f0512d1fa15e03a5c5700bfc11d05

Size: 1.07 KB

text/vbscript

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

Symbol Obfuscation Score Low

MD5	707f0512d1fa15e03a5c5700bfc11d05
Sha1	7919f1de90367e4a79d0e3521f5e12d469014e82
Sha256	bd29ae2fccd2765d23ae043d3c1a0e2e72a46d11bd449b3884ecf4e5f39deb2a
Sha384	1e2ac6bc4331d701b2a89684c0d94688290f20529e02e788eea922b8f670ff5027fbc66cdc60a864550023ed95c7f345
Sha512	c12167fe1905b61a31bc9f6a60a9b9cf33e9e626b0dd7c535d5bcc64c7fec6bd694ff2719754454d031d297b66943a7eaa7841d1fc39d9a1c66491cb300712df
SSDeep	24:exbxNwUqmMQOFkisFT8PKkTQ5kov7P4VbCq0T5y3rTZkRW:ebNwXFk7UXQ/v7Poe5y+o
TLSH	63111277E406D6350B2294D43094D82CD4A344D680948133EA8CC8E47E2B7CCFB2C7EA

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059~T1059.005~T1105

Shape scr:vbs

malicious 1 nodes

Config. Field	Value
URL (COM trace) #1	http:/huhuhuhuhuhuhuhuhuhuhu
URL (COM trace) #2	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

cscriphuhuhuhuhuhuhuhuhuhuhu

Dropped path (COM trace) #1 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	http:/huhuhuhuhuhuhuhuhuhuhu
URL (COM trace) #2	http:/huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

cscriphuhuhuhuhuhuhuhuhuhuhu