Malicious
Malicious

ba8c05cc72c55e8bd55f752ce6458dc5

VBScript
MD5: ba8c05cc72c55e8bd55f752ce6458dc5
Size: 1.28 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ba8c05cc72c55e8bd55f752ce6458dc5
Sha1 33507d9c5b1b2dc6583a97a6887f211e66880b64
Sha256 3c5a7b4c9e7321a0d641e7e3c49089fdfc96d7a14c7e0759747e629ce4797e5b
Sha384 aa87628ed23097867c674fd78a9ca0ed4d06cf87b94851a6115a7b1ef6fd8e4bc13a2bbe945232417de68512fae8ae39
Sha512 4499b2fdd6948b0c7fff21d8b4371b4f0b2e86d622e97ea1216ef272dc9382da77389dcc054e420d9ebf70a6e70b64f048933c25b8d20f7a7ee7dbb409142519
SSDeep 24576:v7wgHD4ZzmK7ZXFIIs5OmpVT7DPwEiesCoTZ:v7G96v9oTZ
TLSH 364533310E76EF650F6D822E527F5E0D36A28E0CC9CC9AD2F6E9115F821EF2115A7538
ba8c05cc72c55e8bd55f752ce6458dc5
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.001~T1059.005>arc:gz>scr:ps1~T1027~T1059.001
Shape scr:vbs>arc:gz>scr:ps1
malicious 3 nodes
Path scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1
malicious 2 nodes
ba8c05cc72c55e8bd55f752ce6458dc5
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Base64-Block]
Malicious
file_0.bin
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙