Suspect
72e6fd1485a5db56f4737101a29cb856
VBScript
MD5: 72e6fd1485a5db56f4737101a29cb856
Size: 14.31 MB
text/vbscript
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 72e6fd1485a5db56f4737101a29cb856 |
| Sha1 | f031ff07c0e6261dd642fbe2c01cbe2a4e702764 |
| Sha256 | eeee4003a15b9c46996d63a5becf324d34f62d9d3473bf7efde6beab75f84168 |
| Sha384 | a079c7fdb08c12ae128e2c0509b580dc34d69d0349ced6f02bc1a0235d2b69ac0f352c7b3ec4b4be6e14d443a2e3e0f6 |
| Sha512 | 6945c542436359e9645a6a37f1ef04e2e53f3f7e16a8b1cd954c5dbee8c76259c776a1ecac1653d6a43216625358c6acbf3e47ca4302768db2b9a95b0c2176de |
| SSDeep | 393216:NaqdtEsvHkdcxnACfqTXMCHWUjXacuI3/PGTAI:N7tEBdon72XMb8XXH/O7 |
| TLSH | 1EE6331C51D25AFEC6E3413DFED159D8E895B4AA1B70C6DF03A887B1AE132E0483E647 |
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 3
STICH kept: 1secondary ignored: 2
bin
1img
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>scr:vbs
Shape
pe:exe>scr:vbs
2 nodes
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Overlay extracted: Overlay_f3ac4039.bin (14013819 bytes) |
| Info | PDB Path: t$mn |
No malware configuration was found at this point.
You must be signed in to view YARA rules.