Malicious
VBScript
MD5: b40cf0dd4fe3f2d72764f8c47b973aaf
Size: 18.9 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score
Very low
| MD5 | b40cf0dd4fe3f2d72764f8c47b973aaf |
| Sha1 | e8629d5eaa105c9515cf724c026afda2489d3c67 |
| Sha256 | 1ba8c6b1a58b294eb15e4f846b141fdda793f834e340767515d89609de5802ad |
| Sha384 | ba0c88d158688fbbf9c0bd7b331cc37e582016feadf1c07fb57f42b34f952466c5ac745f6416f9aa21e7f4a7d34639af |
| Sha512 | 6626cc48c78e0cfcd0ffca4cba873445c60870a7b2c901e2e5d6f08b62a26a855e89a251348805a2292fad517a3dde78c29ae865cc28d3e6e7e725c56791a7e1 |
| SSDeep | 192:eGGRaGGHd43QBZilcR30pu4N59hHR6q47oqGbc7vQqF7+4+6/1/DO2KVnrVoxSc4:GR1k6fx4WgzJF7jZDO2KZW/+8jIT |
| TLSH | D78212B110A6E6DB8319E017B235841D6767E2284277323738FB170D8B3FED6D7592A1 |
Malicious
Malicious
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005~T1105>scr:bat>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Path
scr:vbs~T1027~T1059~T1059.005~T1105>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
wschuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"$Proghuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
""
$Phuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential