Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | feaab80e40c5c6a53b55d92555485679 |
| Sha1 | 034cf562362350985a85bc77c41a4faeb0ed7262 |
| Sha256 | 5a145920b162b6fee3429e2201c03fb8b3a8bc703d13bcac4d21166a05bbe708 |
| Sha384 | 44c167c34c682b65412d1ed281ea209c8fd26e9ad937cfd373390867e376c7bc6c50867e8f92023fc55710c0297088a4 |
| Sha512 | f35e8c366acb3dfe4ef96a8d3ef3e4a3aee8bb61571ecba71fb1a181695b171bee7813b1f4ec4b1beab0825662852e8f31c794481027b3819c48a560184aed11 |
| SSDeep | 96:1yL9A7elvD0MEwULVh9Z0Grh0DLcy0jhAuD/Elif/4/qd:gL32MT6cchDD/zf/4/+ |
| TLSH | F4818783B4095696D5B78CC00997361BF091A27342F5AD74BF8D84D00F3D36AE3B44A9 |
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005
Shape
scr:vbs
technique1 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
feaab80e40c5c6a53b55d92555485679
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
feaab80e40c5c6a53b55d92555485679
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.