Suspect
dcad77d89e24ad8310595948218d8dce
VBScript
MD5: dcad77d89e24ad8310595948218d8dce
Size: 4.23 MB
text/vbscript
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
4.23 MB · 4,229,640 B
First seen
2026-10-12 07:45 · 13 days ago
Last seen
2026-10-12 07:45 · 13 days ago
Last analysis
2026-10-12 07:45 · 13 days ago
Hashes
MD5
dcad77d89e24ad8310595948218d8dce
Sha1
498b24ec2464538f875d74c36296d782a24bbba4
Sha256
1af9bf77ddd6ad2d6dc263abf4b64f9ff72b1d5a73ed54c79e5482f2841c7ccf
Sha384
385069444332dd732e539d2239649299a099364d8418a4452577485124a04474a1d9350e36dc3c665781c2b62a817dd4
Sha512
13c9d4ba04ff012123ecb4ffa3b3ff8700d2c1f595a79ba49cdcb6ef7b0f64f18e9ed6e76ef748df0c7279308fb1fbdf4116d20896cc295e9a7a3a9943cccc75
SSDeep
49152:puI2hvHm1xfD6KHl36IVR2hmNuLJxGzUlbCQfoSL3rdf/rVltjkA:p5O/mPDjVHULJxGQbu2rJztn
TLSH
A016C02FB799253EE4168139A5738701DAB17424230165DB82E4D53DDF2BBF06E38FA2
Detection
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ v6.0 DLLPe123 v2006.4.4-4.12
20 files
VBSdcad77d89e24ad8310595948218d8dce
Structure
VBSOverlay_1dd2bf76.bin
BINResources
BINRT_ICON
BINID:0064
BINID:1033
BINRT_STRING
BINID:0FF5
BINID:0
BINID:0FF6
BINID:0
BINID:0FF7
BINID:0
BINID:0FF8
BINID:0
BINID:0FF9
BINID:0
BINID:0FFA
BINID:0
BINID:0FFB
BINID:0
BINID:0FFC
BINID:0
BINID:0FFD
BINID:0
BINID:0FFE
BINID:0
BINID:0FFF
BINID:0
BINID:1000
BINID:0
BINRT_RCDATA
BINID:0000
BINID:0
BINID:2B67
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0000
BINID:1033
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe>scr:vbs
Shape
pe:exe>scr:vbs
2 nodes
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_1dd2bf76.bin (3387400 bytes) |
20 files
VBSdcad77d89e24ad8310595948218d8dce
Structure
VBSOverlay_1dd2bf76.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account