e84bcb3a32a6dbd9c200a04ddd98e95c

VBScript

MD5: e84bcb3a32a6dbd9c200a04ddd98e95c

Size: 1.43 MB

text/vbscript

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

MD5	e84bcb3a32a6dbd9c200a04ddd98e95c
Sha1	04853efe4732190c558c3040fc8e55df5ea29a5c
Sha256	e5e44b52a0f49822871439bd790ae6a662d2e462fd1924efb2429c09e13ac79d
Sha384	09232bed2296f8b06f040485d9a5c485bea9bf1010b14bfb35e642e6e71773ccac713ba2ef64a0b243ace12330d587fd
Sha512	1ab0b006d37fcbeb6d0982af4af75cc8e76c862664b3282dec4d838faad71cbde90115cc3a385faea30d20c89b4faaa3ff89503ce76fa8ee6e96607819cc9f1f
SSDeep	24576:csuDXXva104BMeRocDP1NhhQEJBDYkaTz4Mcctdrbf6zncNynD6BRMhUT:cVX//i5oojQc0HUmdruzcNynD6q4
TLSH	DE65234D3A678F63C0A915780563CF3843BA5D847B1A8AC37B94B7183DB77A54AD322C

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 4 STICH kept: 2secondary ignored: 2

bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path ole:doc>scr:vbs~T1027~T1059~T1059.005

Shape ole:doc>scr:vbs

malicious 2 nodes

Path ole:doc>pe:dll

Shape ole:doc>pe:dll

2 nodes

Command (COM trace) #1 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #2 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #3 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #4 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #5 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #6 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #7 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #8 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #9 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #10 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #11 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Command (COM trace) #12 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 2huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

No malware configuration was found at this point.

Command (COM trace) #1 UNKNWOWNmalicious

netsh huhuhuhuhuhuhuhuhuhuhu