Malicious
Malicious

966851f93d90b245923d8291deee79d2

VBScript
MD5: 966851f93d90b245923d8291deee79d2
Size: 1.28 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 966851f93d90b245923d8291deee79d2
Sha1 2960a253f3a0ef7a7b97c46a2c7ec0ea3c0b2283
Sha256 4e322f047b202f3ff1a36fab7285fb09114c926db9b7aee21e4ee976b934437e
Sha384 b8a1605e52cad2ecfc5f723a904d0f82b92afc01d85cb4fb3098557791a7aed29c2c60e2db30c4e9f7c591eac6831ffe
Sha512 8ca957b4819d6016931520c1f1783d0269ff12214b766246dd50c9d5d6ac1646d5202c46b0c403319d2a28167ca161d453ef56ab45b828033b687cd4316afe4f
SSDeep 24576:SUmm+C00bTwCdOaxwe65A4r3SvN1SyNIs6AHNNkjly:SU8KkaxwM06jNIsHH/kY
TLSH 834533854AE64D8FCDB8773B40AF0A1909A2AD65000E799037BA6C5F3FDCBC55B03D59
966851f93d90b245923d8291deee79d2
Malicious
[Base64-Block@0x0000027E]
Malicious
[Base64-Block-Decoded]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block@0x00000245]
[Base64-Block-Decoded]
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
3 / 3
Path scr:vbs~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape scr:vbs>arc:gz>scr:ps1
malicious 3 nodes
Path scr:vbs~T1027~T1059.001>scr:ps1~T1027~T1059.001>enc:b64
Shape scr:vbs>scr:ps1>enc:b64
malicious 3 nodes
966851f93d90b245923d8291deee79d2
Malicious
[Base64-Block@0x0000027E]
Malicious
[Base64-Block-Decoded]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block@0x00000245]
[Base64-Block-Decoded]
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙