Malicious
Malicious

c491cf88775d9f8e7d4fae087dc68630

Share on LinkedIn
Print
VBScript
MD5: c491cf88775d9f8e7d4fae087dc68630
Size: 153 B
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c491cf88775d9f8e7d4fae087dc68630
Sha1 fb3fb36d9d612c0dfdfddb89c452bd718dc39258
Sha256 ea8fcad382a64ad10f139ba40fa81dc597cd779eda8a6fdadd5125fb96471c5f
Sha384 86941e59ea7aa63e4f632233c7563f21691d84ea3209db74983ac812e0c3a5de43a5ae43fa3eb819c38cb2a1ce64efe2
Sha512 38339c639a2e88f5782b285077dcace0f8254fc4088058c017e1c126aec825c51769d41484e49f2f90f6d3c75125968a03a8dbf84970fcad31d8c20af7d171ba
SSDeep 3:jeYcRm8nhr2SSJJFItGQqPJH0cVERvMXI3eD3uno6cxpv:jeUqhrK80QO0ceuzunoJL
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
c491cf88775d9f8e7d4fae087dc68630.deobfuscated.vbs
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:bat>scr:ps1
malicious 3 nodes
Path scr:vbs~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1
malicious 2 nodes
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
"" irhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙