Malicious
VBScript
MD5: ef7181deee2612dce70f66e0a9cdfbcc
Size: 1.05 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | ef7181deee2612dce70f66e0a9cdfbcc |
| Sha1 | f3c54f422254584bf28f96fa8bdb621bfa7b81d0 |
| Sha256 | aed09e9db41ae8457b5993584409582e6cb6472e4e1d68f92f919a47f553b8da |
| Sha384 | c6923d559a9118d4fa73f15fea4bc4908ebbcc486c2a0c53aa410ca830bb0815feb185445c650bc241065c6101697928 |
| Sha512 | 49c39bc2d5a420a941976a71d531b58056d28b1a3209722ef7b03066aecbd8e517a21c4356c4e3b3eb7e102f3db5b0f45e27c46e9b8b0d38a4b379cc3e3b3162 |
| SSDeep | 384:PA6j7Dk7Do73K7t737i7Y787g7p7S7J7d767SD7Ej7YDGAgImy:4aKyDJmy |
| TLSH | AD253335EB2C1F61A3830F64DC43151CEAB34F5FC1DE65A19C2E325D336486A62AA78D |
Malicious
Malicious
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential