Malicious
Malicious

ecc61a8a37339882ec7b73b21983dd02

HTML
MD5: ecc61a8a37339882ec7b73b21983dd02
Size: 15.28 KB
text/html
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
Symbol Obfuscation Score Low
MD5 ecc61a8a37339882ec7b73b21983dd02
Sha1 860e8fb3209b2d22b49e9406d75fa964fbaff0dd
Sha256 2f628ec25633d4b9f1a50f958ac6abcd6f341942b6deebe23807d4a792c00ca5
Sha384 2f2769ad11721057693722b090fbc1d1a4c2f646e561d1b94db43d69bfa559d333a26c056c6d26348c047f9d5b2e34e0
Sha512 f95f87275e3f0138ae408f5ecac51fcffcd09ef3eb808f1b0cbd34d78e951d8a262b958cffe932db7dfd2ab1006ea713db8bdfafc28fbf86c414a52026f72567
SSDeep 384:TXNHMa1hxg2M/NXcNnwNUKFRIEiifKNJPbNFEOr:T1M2FgNXquRVzfAZZpr
TLSH 2C623951ADF7B35D0E9AF1BA547935ABB0FC8C439DB52F38FC5CA863191621129CC08A
ecc61a8a37339882ec7b73b21983dd02
Malicious
[Command #0]
[Base64-Block]
[Command #1]
Malicious
[PowerShell Command]
Malicious
[Base64-Block@0x0000033A]
[Base64-Block-Decoded]
[Base64-Block@0x0000065F]
[Base64-Block-Decoded]
[Base64-Block@0x00000984]
[Base64-Block-Decoded]
[Base64-Block]
[Base64-Block@0x000002AD]
[Base64-Block@0x000005D1]
[Base64-Block@0x000008F5]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
4 / 4
Path html~T1027~T1059~T1059.005>scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001>enc:b64
Shape html>scr:vbs>scr:ps1>enc:b64
malicious 4 nodes
Path html~T1027~T1059~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape html>scr:bat>scr:ps1
malicious 3 nodes
Command (COM trace) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
ecc61a8a37339882ec7b73b21983dd02
Malicious
[Command #0]
[Base64-Block]
[Command #1]
Malicious
[PowerShell Command]
Malicious
[Base64-Block@0x0000033A]
[Base64-Block-Decoded]
[Base64-Block@0x0000065F]
[Base64-Block-Decoded]
[Base64-Block@0x00000984]
[Base64-Block-Decoded]
[Base64-Block]
[Base64-Block@0x000002AD]
[Base64-Block@0x000005D1]
[Base64-Block@0x000008F5]
No malware configuration was found at this point.
Command (COM trace) #1 UNKNWOWNmalicious
cmd /chuhuhuhuhuhuhuhuhuhuhu
ecc61a8a37339882ec7b73b21983dd02
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
ecc61a8a37339882ec7b73b21983dd02
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙