Malicious
Malicious

ddfbf6c88cbf00b614dad7de60f8151a

JavaScript
MD5: ddfbf6c88cbf00b614dad7de60f8151a
Size: 18.92 MB
application/javascript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 ddfbf6c88cbf00b614dad7de60f8151a
Sha1 a733720514c220e4b7f713505c4bbd4cccd89b2b
Sha256 971eecc4288a550ff9606dd8af9601c10714f9e41a2d5fcac325647a0cdf0cd0
Sha384 74687038e8873e45b6fbbc699ccfd37f88b39674005f5d9d178ae63b7138c065ff8533ac08659b11b51d30176b8b4d7c
Sha512 588a4e2ba3b1ce50fb5feac16ddd55ccdcfefac29958784156ae1319584c3192467fd95c1edbb9bd49d17dc84414995a8451a5550efc712498780cbcb882afd7
SSDeep 98304:886txz7QteJBABZALx1TDGXbOaKs/7O2z9/26tV:6txXQU7TTO/7O2z9O6X
TLSH FF17CF11358680B7F1EF4330599DBB69F2FDEDA007218597EA84F62C2E334C26927667
[Authenticode]_53f5fcba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
Malicious
PNG
ID:0000
ID:1033
ID:1033-preview.png
XML
Malicious
ID:0000
Malicious
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_MENU
ID:1004
ID:1033
ID:1005
ID:1033
RT_DIALOG
ID:17D4
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0792
ID:1033
ID:0794
ID:1033
ID:0795
ID:1033
ID:0796
ID:1033
RT_GROUP_CURSOR4
ID:13F6
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path scr:js~T1059.007>pe:exe~T1059.007>pe:rsrc>img
Shape scr:js>pe:exe>pe:rsrc>img
technique4 nodes
Path scr:js~T1059.007>pe:exe~T1059.007>pe:rsrc>scr:vbs~T1027~T1059.005
Shape scr:js>pe:exe>pe:rsrc>scr:vbs
technique4 nodes
Name Value
VHD
DiskImage extraction mode: DiscUtils (VHD)
VHD
DiscUtils extraction failed (InvalidOperationException) for VHD.
VHD
DiskImage extraction mode: RecursiveExtractor fallback (VHD)
[Authenticode]_53f5fcba.p7b
Structure
DosHeader
PE Header
Optional Header (x86)
Section Headers
.text
.rdata
.data
.rsrc
.reloc
Resources
Malicious
PNG
ID:0000
ID:1033
ID:1033-preview.png
XML
Malicious
ID:0000
Malicious
RT_ICON
ID:0001
ID:1033
ID:1033-preview.png
ID:0002
ID:1033
ID:0003
ID:1033
ID:0004
ID:1033
RT_MENU
ID:1004
ID:1033
ID:1005
ID:1033
RT_DIALOG
ID:17D4
ID:1033
RT_STRING
ID:0007
ID:1033
ID:0792
ID:1033
ID:0794
ID:1033
ID:0795
ID:1033
ID:0796
ID:1033
RT_GROUP_CURSOR4
ID:13F6
ID:1033
RT_VERSION
ID:0001
ID:1033
RT_MANIFEST
ID:0001
ID:1033
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙