Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score High
MD5 a87df19f02b265d0fa0f5304fc51e137
Sha1 a5fa10551457ee9b9b39b078d70d96430b2041d6
Sha256 df0be709a16dfdec2a137250529324f83f9d80f88bd3f9c95abe01fd30a9f1c7
Sha384 05084019d4580f9832e65bd1293a8ddbc05c3e243264c8baa18b2b938fe56e5b2492041408227606d0b56a0f9f1b8f41
Sha512 ce68b7a5f60f08b1fc97765740454a0f9d108ec1240462426bb7758adc9f3bef71a4a08ad54873d4f94804a921f775e9c1cb103bff1389e9d7f50a5b321f35d8
SSDeep 49152:6zY+yFbxMkx8uCcvML1DrM+HeqiZKz91JGtcY6CZlvFARRrg9s1:YL
TLSH CB161233EBA4051B06E14766F05A3272FE3EC433874982A6D8DDE219368B4DE817E5F5
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes
Command (COM trace) #1 UNKNWOWNmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #2 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
Command (COM trace) #1 UNKNWOWNmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
a87df19f02b265d0fa0f5304fc51e137
Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
a87df19f02b265d0fa0f5304fc51e137
Dropped path (COM trace) #2 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
a87df19f02b265d0fa0f5304fc51e137
Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
a87df19f02b265d0fa0f5304fc51e137
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙