Suspect
b3b002b88b03831729f2672459ae3e0e
VBScript
MD5: b3b002b88b03831729f2672459ae3e0e
Size: 18.53 MB
text/vbscript
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
18.53 MB · 18,534,547 B
Hashes
MD5
b3b002b88b03831729f2672459ae3e0e
Sha1
1aa75add71e1b9b33b76dafac944f29caa47abf7
Sha256
8570d8ec3fdb34495f6824ea39f48eb5c7f71a2c3815b43456fe8ac706c61ad0
Sha384
7c6dab247718080330497a9613a4806b8bc0b7f1308ba2767abd28c9e05d24d6b84b2f9b26fb2f33fba5f4f4ca293268
Sha512
a67ae45419ab2ce712a02a1318f5d1b50413bb60a64547ac5c76b8f5e8e51da2511fd7347cb99a1c0cf573e61a267f4c1cf7da64b541d596f94a8d5d26b6ccd7
SSDeep
393216:epQwaDqPD+cDnDYuWJb3hinmQrTIyv6HX4O223U7mLCsI:ephWxcDnDYuuQDrTf4W2ESLI
TLSH
B91733F8479FDD7477C0EAF948052BC553BBAA1D3A606465CF02AAB358F04143768ACE
20 files
VBSb3b002b88b03831729f2672459ae3e0eT1059.007
JSPathologyLabelPrinter.exeT1059.007
Structure
JSOverlay_ca075bb9.binT1059.007
BINResources
BINRT_ICON
BINID:0001
IMGID:0
IMGID:0-preview.png
BINID:0002
IMGID:0
IMGID:0-preview.png
BINID:0003
IMGID:0
IMGID:0-preview.png
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
IMGID:0
IMGID:0-preview.png
BINID:0006
IMGID:0
IMGID:0-preview.png
BINID:0007
IMGID:0
IMGID:0-preview.png
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINRT_MANIFEST
BINID:0001
BINID:0
TXTREADME - Pathology Label Printer V2.txt
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 4
STICH kept: 3secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
scr:vbs>pe:exe~T1059.007>pe:rsrc>img
Shape
scr:vbs>pe:exe>pe:rsrc>img
technique4 nodes
Path
scr:vbs>pe:exe~T1059.007>pe:rsrc>bin
Shape
scr:vbs>pe:exe>pe:rsrc>bin
technique4 nodes
20 files
VBSb3b002b88b03831729f2672459ae3e0eT1059.007
JSPathologyLabelPrinter.exeT1059.007
TXTREADME - Pathology Label Printer V2.txt
No malware configuration was found at this point.
You must be signed in to view YARA rules.