Suspicious
Suspect

da726563859745e1312b910a2a693762

VBScript
MD5: da726563859745e1312b910a2a693762
Size: 12.34 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 da726563859745e1312b910a2a693762
Sha1 9bbeb66b6a5d41946b9120f47fb2a4809bf89edb
Sha256 bc6af94ef856472d2a5b75de58fc12e9616d37d1b9dba17ffeeda81d77e40b47
Sha384 90756237ab8b44f9b91e7aac8f7012f21a45f2b8881badb6c33d61c03c644737d04f370522879e5f70e0d7c668389d51
Sha512 cae1bc3c0fecc103c44aab632f1610a0fc6375c90281fc67bb449800a058290bd9109fff90717c9938061d0c8922ba48f973c2a820cf749ac452f6c18a14b818
SSDeep 98304:d6WwVvYSt4QsMWI0Mqr+S+iz26xZmdrcC0p6S64/uFEgKR3:d5at4QEI0Mc+D6PmdQz6qfgW
TLSH 76C64A07E8A545E9C1E995348562D232BB317C481B2127C72BD0FF2A3FB6BD06EB9750
[Authenticode]_8d9a5eeb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
.rzqog
.ppnrf
.ppeni
.ppygj
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
RT_GROUP_CURSOR4
ID:0003
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
da726563859745e1312b910a2a693762
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>html
Shape pe:exe>html
2 nodes
Name Value
Info
PE Detect: PeReader OK (file layout)
Info
Authenticode present at 0xBC2000 size 9584 bytes
[Authenticode]_8d9a5eeb.p7b
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
.rsrc
.rzqog
.ppnrf
.ppeni
.ppygj
Resources
RT_ICON
ID:0001
ID:0
ID:0002
ID:0
ID:0003
ID:0
ID:0004
ID:0
ID:0005
ID:0
ID:0006
ID:0
RT_GROUP_CURSOR4
ID:0003
ID:0
RT_VERSION
ID:0001
ID:0
RT_MANIFEST
ID:0001
ID:1033
da726563859745e1312b910a2a693762
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙