Malicious
Malicious

c3346fb36de3d094519ba433b54601ef

Share on LinkedIn
Print
PowerShell
MD5: c3346fb36de3d094519ba433b54601ef
Size: 19.29 MB
application/x-powershell
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
19.29 MB · 19,290,731 B
First seen
2026-09-04 12:45 · one month ago
Last seen
2026-09-04 12:45 · one month ago
Last analysis
2026-09-04 12:47 · one month ago
Hashes
MD5 c3346fb36de3d094519ba433b54601ef Sha1 6c2ec7aa9c364125be1c81a54d6c9aa27e2569c8 Sha256 6542c5d1fa6435e6fd1ce77297920da6c3f8d726f9f425e16ae4b2694f50500e Sha384 4eeaab9ca1d8354e2edbe98163e31abf42a63c46c8376f031a3f043499fb6504182e73edc1d822ce10d19161ae1c2a47 Sha512 419ed0f566b6cbd07de794d6a9653b1d83f8fee8bca27c751a785b19cf6dd4cfdcf4083a30920c3b8bdd459e45103cabe76c4433cbfc64f6b08f8bba13743286 SSDeep 49152:fJnn71zT3mcAaeUl+WkAKBIyqGuZ4Xk38jNIBcDCp/FBPaaGpZhJrUdtsN7o3XwK:d TLSH F617BC3C66943466153BD1C6BA73C22B4DB490BFB20B3357698C430C3959C9EAB9A47F
Detection
Symbol obfuscation
Medium
3 malicious · 3 files
PS1c3346fb36de3d094519ba433b54601ef
VBSc3346fb36de3d094519ba433b54601ef.deobfuscated.vbs
BINc3346fb36de3d094519ba433b54601ef.comtrace
SH[Command #1]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:bat
Shape scr:ps1>scr:bat
malicious 2 nodes
Path scr:ps1~T1027~T1059~T1059.001~T1059.005>scr:vbs~T1059.005
Shape scr:ps1>scr:vbs
malicious 2 nodes
Command (COM trace) #1 UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙