Malicious
VBScript
MD5: a5056507d7e5829094631ffea82cd357
Size: 1.55 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | a5056507d7e5829094631ffea82cd357 |
| Sha1 | 8e113fc9626ae4b311981a87f1f8d10122087a64 |
| Sha256 | 494a7099ad7c4bc528e172be576488cddf29d8fd7e2faf3964ae1ff6b206010f |
| Sha384 | 0cc5c09b72b812a54977007cc473970922ad4bab2c65387f8ab58ebaa1ec1aa446812cb07ccf9080c67d0875f301fd9b |
| Sha512 | 1615856490b408488b4c99c24594cbe51293d38f15f8a66316deb5ef3c8149907f8b9de954dbe727797142c3f35fda34fa3d691976229df32f39d2d5ec4f67b0 |
| SSDeep | 12288:soOeBuX99RvTULkTyCKfc9KoTHu0HUqZN/hpv:ZOOut9ZTUYnK2Lb5HUqZRhR |
| TLSH | 4D75305203451B7DF5B90EC4884B215B20F1D95A7928028BDFB36EE7BCBB984DE34636 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Command (COM trace) #1
UNKNWOWNmalicious
wscriphuhuhuhuhuhuhuhuhuhuhu
Command (COM trace) #2
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential