Malicious
f92d8a2f5c3d9140c233c0012d9ad43e
PE Executable
MD5: f92d8a2f5c3d9140c233c0012d9ad43e
Size: 18.56 MB
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Encoded VBScript file
Size
18.56 MB · 18,563,072 B
First seen
2026-08-25 18:15 · 2 months ago
Last seen
2026-08-25 18:15 · 2 months ago
Last analysis
2026-08-25 18:15 · 2 months ago
Hashes
MD5
f92d8a2f5c3d9140c233c0012d9ad43e
Sha1
bc716d57de7f312667adfb4831c6ee419d23c1a9
Sha256
36cd6bffbae0e88e20b56251445092e57977a990ea2f92e84321ecc9a16eb53b
Sha384
97afe90bcea7b2c6e16380156804848fa1707130d96908180a6d007de8714c3abbadc43d6a5093877cbb8170891fc933
Sha512
fd06f0c8f7d0f50c575b8caa066501fd2bf91a93b5c7ce8959c1a163ed81da4b94c27304a96505a7341e09d34589377ee29d144bd9ad7fa86e75f76f2873ab2c
SSDeep
393216:rFHkPwrY5WJVwJf1+TtIiFqCuARuAdqxrEpWWHRrISlMWman:FcwrYWJqV1QtI1CuA0NEIiRJlMWn
TLSH
961723007E4089A1E0565977C1AF520447B1ED411BA7E32BBAE8377E19133E37D2EADB
Detection
PeID
Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon
4 malicious · 48 files
EXEf92d8a2f5c3d9140c233c0012d9ad43eT1059.005
Structure
BINResources
BINRT_ICON
BINID:0001
IMGID:0
IMGID:0-preview.png
BINID:0002
IMGID:0
IMGID:0-preview.png
BINID:0003
IMGID:0
IMGID:0-preview.png
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
IMGID:0
IMGID:0-preview.png
BINRT_RCDATA
BINID:0000
BINID:0
Structure
VBSOverlay_f79dcbfc.bin
BAT5y8Ja.bat
EXEbridgecomsurrogate.exe
Structure
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BIN.Net Resources
BINhkIajNU27CJHmId2Kr.5VLR70DNcHawG6Cb9e
BIN9bAI1356IaWAlBdChM.G5547HpQEipB9Kaa6Q
VBS1YP6Vw0FiH8S7GMojIJ0PD6Z.vbe
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
BINID:0
BINRT_ICON
BINID:0001
BINID:0
BINID:0002
BINID:0
BINID:0003
BINID:0
BINID:0004
IMGID:0
IMGID:0-preview.png
BINID:0005
BINID:0
BINID:0006
BINID:0
BINID:0007
BINID:0
BINRT_GROUP_CURSOR4
BINID:0001
BINID:0
BINOverlay_6123334c.bin
BINRT_GROUP_CURSOR4
BINID:0064
BINID:0
VBSf92d8a2f5c3d9140c233c0012d9ad43e.decoded.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
10 / 10
Path
pe:exe>pe:rsrc>pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
Shape
pe:exe>pe:rsrc>pe:exe>scr:vbe>pe:exe>pe:rsrc>bin
malicious
7 nodes
Path
pe:exe>pe:rsrc>pe:exe>scr:vbe>pe:exe>bin
Shape
pe:exe>pe:rsrc>pe:exe>scr:vbe>pe:exe>bin
malicious
6 nodes
4 malicious · 48 files
EXEf92d8a2f5c3d9140c233c0012d9ad43eT1059.005
Structure
BINResources
BINRT_ICON
BINRT_RCDATA
BINID:0000
BINID:0
Structure
VBSOverlay_f79dcbfc.bin
BAT5y8Ja.bat
EXEbridgecomsurrogate.exe
Structure
BINResources
BIN.Net Resources
VBS1YP6Vw0FiH8S7GMojIJ0PD6Z.vbe
BINResources
BINOverlay_6123334c.bin
BINRT_GROUP_CURSOR4
VBSf92d8a2f5c3d9140c233c0012d9ad43e.decoded.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account