Malicious
Malicious

867937db98236acd9a79bb32af23c464

VBScript
MD5: 867937db98236acd9a79bb32af23c464
Size: 925.53 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Very high
MD5 867937db98236acd9a79bb32af23c464
Sha1 fb7ca41862bec461c23824b1fe4c1912aad786dd
Sha256 dd4d50ce92e68f93aa418297a1bf17d304e7e36748edcf553e3585a4fe75fa69
Sha384 36435112b6f6a82d6bcb5270789fbe60a8029b50789f03d25592bfb640826f19a6a07f0545caf91fd02e0b7bc899fb82
Sha512 d9bc551559c8632b038ed2ab9dbd951338668db63ae21858621b7d2db2e254d30d1aeb498b77255523d72bdbcc1c733b6e8dd2d07694006d29cd3f568ef2f099
SSDeep 12288:P2LP/98VLhVCP/gPV1Jqc7g9K13/T+33M5PNS3rPHeUPDNTW:KPVGooWKxanWarPHev
TLSH 2A15B051BFC82A69AFAC190FE0BEAE0E43F21705D95270DDA7572B0B295FE4C440B196
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes
Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
867937db98236acd9a79bb32af23c464
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
867937db98236acd9a79bb32af23c464
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙