Malicious
Malicious
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 e16399d81fd3f056dd4b9d8dd2750868
Sha1 66f60fbb7eb76126ac3e79b8cd004c5bbf504374
Sha256 c4f6b85484d4c26655d3226dbe18e9ed2f8463cff82a428a7106b311ff6255a6
Sha384 d0c59aa9673996c5722a54c94f643066abeb23c34ca1413d9188be32b01a1ab55b5cd88573bb1b5d3a14e5f118dad4b1
Sha512 3dcf113bdc8faf0b725829b42e4884129a810b2edbd636761e80d59fa1e9d80ed608e2f803ddcb289c71b7b38fb20f943808142a36143e39c5951ece95adbc7e
SSDeep 12288:Skm0CLEEBYQl3DMA+TasA9tk8QX0n+BY2bQ/rcNZzR99G56keRj3w6E:SoqEESQx+WLk8Qkn+QjwzS6E
TLSH 10C4E1119E445FE4CFBCEA1C80F92609E6B00A8F4816A449F7B77C8EAFB7985411F2D5
e16399d81fd3f056dd4b9d8dd2750868
Malicious
[PowerShell Command]
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:vbs~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:ps1>scr:vbs>scr:ps1
malicious 3 nodes
Path scr:ps1~T1027~T1047~T1059~T1059.001~T1059.005>scr:bat
Shape scr:ps1>scr:bat
malicious 2 nodes
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
e16399d81fd3f056dd4b9d8dd2750868
Malicious
[PowerShell Command]
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
e16399d81fd3f056dd4b9d8dd2750868
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙