Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ba62a1ba30511c91ee7e11930ae1e91b
Sha1 c252409f6eb94e91415e1cc5961c0404d2dfacf9
Sha256 077b2384cd5392b0cdb2be3505b2a314e1553194d9f2295fb38bb757abb786b1
Sha384 499bd033049f075970a3bf74f89b6c8416de33e1125fede9661a9b4838dd34f19f180643a65606357c399c565197adb4
Sha512 883546a245f02bd1604f3f4ee180d652e32964bb0c78b7bb98891948c784d4dc6c08c135500c994c5dc53ae58eaf7e0b4c943d2c287e9a9fc89b9577715ee93d
SSDeep 768:Es1pH8RQOddlq6VWMfYZs46oW3TpEk6d2/5b1gtnN6cKEs6c7f6+63N3OqA1JF7r:RnQ
TLSH 79253DCD100644BF28443646EA49CAD8FECDBAB2D56D538F5861E9E04853C0AFBB3D9D
ba62a1ba30511c91ee7e11930ae1e91b
Malicious
[PowerShell Command]
Malicious
[PowerShell Command].deobfuscated.vbs
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
ba62a1ba30511c91ee7e11930ae1e91b.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:bat>scr:ps1
malicious 3 nodes
Path scr:vbs~T1059.005>scr:ps1~T1027~T1059.001~T1059.005>scr:vbs~T1059.005
Shape scr:vbs>scr:ps1>scr:vbs
malicious 3 nodes
Deobfuscated PowerShell UNKNWOWNmalicious
Copy-Ihuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
ba62a1ba30511c91ee7e11930ae1e91b
Malicious
[PowerShell Command]
Malicious
[PowerShell Command].deobfuscated.vbs
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
ba62a1ba30511c91ee7e11930ae1e91b.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
No malware configuration was found at this point.
Deobfuscated PowerShell UNKNWOWNmalicious
Copy-Ihuhuhuhuhuhuhuhuhuhuhu
ba62a1ba30511c91ee7e11930ae1e91b › ba62a1ba30511c91ee7e11930ae1e91b.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙