Malicious
Malicious

c8721acf9aa56cf82f4846d4134ab818

VBScript
MD5: c8721acf9aa56cf82f4846d4134ab818
Size: 43.95 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 c8721acf9aa56cf82f4846d4134ab818
Sha1 5e372298d04f45ff0286d9f4413af9123b3d4734
Sha256 3af05f96e69e75d243e1ca4e4fb62b31c29ae3eea529e5112a26729460d3e222
Sha384 594ef4e149a370c608775ceb463daba750af99fb657c05237c1a589ce4bdd66f8cabd755ee6dc86cb94a3e5ed06e92de
Sha512 2ac76a744353ec7a1845175c6956e0a3ecb06c350eadef7b574349130d8083d3135279720461001781d0005cdf88aab3dd2db7ff65a30efe8a58dc38deaca4c4
SSDeep 768:T6YdLKILgMjN96YdLKILgMjNC6YdLKILgMjNR6YdLKILgMjNNtc:GYdLVTjNkYdLVTjNlYdLVTjNYYdLVTjC
TLSH 24136A89CDF287CE3D3A252C233C669AF9D51A1B0925C21172CAF5084FB96C88DFD6D5
c8721acf9aa56cf82f4846d4134ab818
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command].deobfuscated.vbs
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs>scr:ps1~T1027~T1059.001~T1059.005>scr:vbs~T1059.005
Shape scr:vbs>scr:ps1>scr:vbs
malicious 3 nodes
c8721acf9aa56cf82f4846d4134ab818
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command].deobfuscated.vbs
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙