Malicious
c3346fb36de3d094519ba433b54601ef
PowerShell
MD5: c3346fb36de3d094519ba433b54601ef
Size: 19.29 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
19.29 MB · 19,290,731 B
First seen
2026-09-04 12:45 · one month ago
Last seen
2026-09-04 12:45 · one month ago
Last analysis
2026-09-04 12:47 · one month ago
Hashes
MD5
c3346fb36de3d094519ba433b54601ef
Sha1
6c2ec7aa9c364125be1c81a54d6c9aa27e2569c8
Sha256
6542c5d1fa6435e6fd1ce77297920da6c3f8d726f9f425e16ae4b2694f50500e
Sha384
4eeaab9ca1d8354e2edbe98163e31abf42a63c46c8376f031a3f043499fb6504182e73edc1d822ce10d19161ae1c2a47
Sha512
419ed0f566b6cbd07de794d6a9653b1d83f8fee8bca27c751a785b19cf6dd4cfdcf4083a30920c3b8bdd459e45103cabe76c4433cbfc64f6b08f8bba13743286
SSDeep
49152:fJnn71zT3mcAaeUl+WkAKBIyqGuZ4Xk38jNIBcDCp/FBPaaGpZhJrUdtsN7o3XwK:d
TLSH
F617BC3C66943466153BD1C6BA73C22B4DB490BFB20B3357698C430C3959C9EAB9A47F
Detection
Symbol obfuscation
Medium
3 malicious · 3 files
PS1c3346fb36de3d094519ba433b54601efT1027 · T1059 · T1059.001
VBSc3346fb36de3d094519ba433b54601ef.deobfuscated.vbsT1059.005
BINc3346fb36de3d094519ba433b54601ef.comtrace
SH[Command #1]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
malicious
2 nodes
Path
scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
PS1c3346fb36de3d094519ba433b54601efT1027 · T1059 · T1059.001
VBSc3346fb36de3d094519ba433b54601ef.deobfuscated.vbsT1059.005
BINc3346fb36de3d094519ba433b54601ef.comtrace
SH[Command #1]
No malware configuration was found at this point.
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
c3346fb36de3d094519ba433b54601ef
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
c3346fb36de3d094519ba433b54601ef
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account