Suspicious
Suspect

e973b260c4613c14d285536e398f82cb

VBScript
MD5: e973b260c4613c14d285536e398f82cb
Size: 11.12 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 e973b260c4613c14d285536e398f82cb
Sha1 4ba10e9acc18d2dd1d5acc72a681278c10145898
Sha256 b8236efcfcdeb61c932b19488d58ba10c2033ca0b9a4bcf95d0dadc8620af196
Sha384 21bf2e27ad9df3ff0f800bb3433079368da0955ffd47afb908be3ff3958a72fe83620cad6143b79cd7b56c50ba4eb1b0
Sha512 6a40c3f5b02cec53e1cdbbeab5e554ffd7baa3783b83345fc0d678d02640f3a55c0183e05177d95358a3317fc5a74e0d2df31b0038e01f3cb960e5e6e691ef8c
SSDeep 98304:YpdPeWti7fApX4Pjsoe2xJaew7nkpoExqREt:MkWi7YFoLxJ1+dE8y
TLSH F2B64A43FDA454E8C0AEC174CA7296227B72BC895B3123D76B50B3292F76BD09E79350
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
e973b260c4613c14d285536e398f82cb
0x005683ED.svg
0x005A74EB.svg
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

img 1
Name Value
Info
PE Detect: PeReader OK (file layout)
Structure
DosHeader
PE Header
Optional Header (x64)
Section Headers
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
e973b260c4613c14d285536e398f82cb
0x005683ED.svg
0x005A74EB.svg
No malware configuration was found at this point.
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙