78733fcc4209252b2299adfd990b2830

ZIP Archive

MD5: 78733fcc4209252b2299adfd990b2830

Size: 286 B

application/zip

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	78733fcc4209252b2299adfd990b2830
Sha1	d317d57984d5008c76af80f3c615aa8abb10f20d
Sha256	0c8adb1199380854610f00319898a554d8123fb9b9dbf78fc959c3d505ecd2a5
Sha384	675b202d07e381415177adb7e682fa4a7ef32fea1b91c62e9bb313041a124aa6973f8401183b04611d8e1c43cd3fb990
Sha512	306c1c2fec0a116a232c14938fba4566fd341049efba5340ed4f29192943f1c10f1b105070ee95f598d8931b172a16219ffe6157d4017a1dbd7514fb4f62da49
SSDeep	6:5jrTnO6jxA+8yymXBw6yjxuEvNVbF5GvjjrTcO6jMt+lyt/:5jrK6jxA+87UQjYEvNxFOjPp6jEay1
TLSH	6CD02B07F7977322D20155F4CA695D2E80878D04CDA5A0B7296D10852C511880F91151

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path arc:zip>scr:vbs~T1027~T1059~T1059.005

Shape arc:zip>scr:vbs

malicious 2 nodes

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

msihuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

Config. Field	Value
URL (COM trace) #1	https:huhuhuhuhuhuhuhuhuhuhu

We extracted this malware's full configuration (C2, credentials, campaign IDs…).

Unlock with Essential

Command (COM trace) #1 UNKNWOWNmalicious

msihuhuhuhu

78733fcc4209252b2299adfd990b2830 › GoogleMeetDesktop.vbs

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

78733fcc4209252b2299adfd990b2830 › GoogleMeetDesktop.vbs

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

78733fcc4209252b2299adfd990b2830 › GoogleMeetDesktop.vbs

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

You must be signed in to view YARA rules.