Malicious
VBScript
MD5: b28fb0172961fcb8ea529008afb5b8ff
Size: 131.44 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Medium
| MD5 | b28fb0172961fcb8ea529008afb5b8ff |
| Sha1 | 59d9f1f6d9c01b2e689425bc78910ad3506f1315 |
| Sha256 | 83f698450650c084e323a20eb6fceb7a4186b61fd7845275c006dac941a6ecaf |
| Sha384 | 426a762b69b674a79c41f1816f007ec38984a91121458521cb7f138c36f57cdf1c7ca6dc18eaba9d432af11d6e98abb6 |
| Sha512 | 07e3e153ed63fe4a6ac738fd5754f0a448334bd68314f258e36729843e3a19724fba14dc302f738bff2379efba17ef726659d15f8dd0ff36d8de926f8bd8b01d |
| SSDeep | 1536:JlVKDfGHLM+IKu1PC3mkEYJbHY8kD3QrsUxPYMXqt15/9pPRp1qc38EY708omwEf:JlVKzs8VtQjV2T7Yamgpu |
| TLSH | 60D3705137941A79F27D0FC9C54F204A20F294DA3A24C14B9FB31AE37EE7A95CE34526 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Command (COM trace) #1
UNKNWOWNmalicious
wscriphuhuhuhuhuhuhuhuhuhuhu
Command (COM trace) #2
UNKNWOWNmalicious
cmd.exhuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Removehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential