dc0fb67d73f6636cfcc34fca49814593

VBScript

MD5: dc0fb67d73f6636cfcc34fca49814593

Size: 9.36 MB

text/vbscript

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	dc0fb67d73f6636cfcc34fca49814593
Sha1	e48102c5c8d6cb4e1ae55a3765fa0b529cf0b9a6
Sha256	9d85071bd8c7cc52bf5ce1811398e0cc28b06a7d5a0d6fce5c7debb48a04b53d
Sha384	677404168e30c08b6da6c1e6e5e0672f2ca4632b4e4862cb7f0733edb4abe0d124849ff8d436faf656ed0baf25b4c06b
Sha512	dcb3fa8b60c083a253180f11efac425cdfd1555d7f16c6d7f4543baafb16b049696e3e0b89bb887afb04f501963064867a417feb4e9cd701d6f4eaf48f36cf14
SSDeep	196608:vg+r8hZplEoNORK4xdoS91KCrxlzGDYFCueN4wfXXZouDH:jQhFLURK4xdoSiekSCueKI5bH
TLSH	F596BE01FDD744F6E807593141A7A26F27346D004B34DBDBEBA1BB6AF9B76A20C36205

PeID

HQR data fileMicrosoft Visual C++ v6.0 DLLPeStubOEP v1.xPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path pe:exe~T1027~T1055>bin

Shape pe:exe>bin

malicious 2 nodes

Name	Value
Info	PE Detect: PeReader OK (file layout)
Info	Authenticode present at 0x8EB400 size 9632 bytes
Attribution	`Loader Go Factory-v3 : le stealer livré (Vidar, Lumma ou RemusStealer selon le build) est mappé en mémoire et n'est pas attribuable statiquement.`

No malware configuration was found at this point.

You must be signed in to view YARA rules.