Suspicious
Suspect

8051c2c784ca3897c5f3937edd8f887a

VBScript
MD5: 8051c2c784ca3897c5f3937edd8f887a
Size: 2.98 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 8051c2c784ca3897c5f3937edd8f887a
Sha1 c119d46007b11ca666ccaa399492d832643cc861
Sha256 441a9bd8a0f93eae564b2e4397990f5d91479e18601ddcb5241afa7d559b4e77
Sha384 fd26108742099372a7a7845093858f1b56f71b9ec6b799679cb9008f21a608b0f3e259bed2a53d1472efd3139aeca5c8
Sha512 f48c69ba0fd0d772a20bc1c31f09fd9eee610a782e0b11cfa76e8e1de707fbfeaae2d7f1d5899104c817f9e82414e4bd0591958648cf8c1db02333f55dee3691
SSDeep 49152:8SqyanGD4rv/0ElX+lrlP1msT0GvT+vYmddW807ji5bVMixoMPdW9t/vub:8yaG+v/0E+NV1msT06IZwf1ird8/
TLSH 3BD5239DBCE21034F432C3F78383A1BDB12A77459BB14C4665CDAB50AC529286C7B77A
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.RtY
.(OL
.
mL
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe
Shape pe:exe
1 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.RtY
.(OL
.
mL
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙