Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
15 malicious · 17 files
VBS1033376328b80ebddea337cdee483191VBScript
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Base64-Block]decoded · base64 · PowerShell
B64[Base64-Block@0x00000F24]decoded · base64 · Base64 Block
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, [huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
15 malicious · 17 files
VBS1033376328b80ebddea337cdee483191VBScript
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Base64-Block]decoded · base64 · PowerShell
B64[Base64-Block@0x00000F24]decoded · base64 · Base64 Block
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
@(0, [huhuhuhuhuhuhuhuhuhuhu
1033376328b80ebddea337cdee483191 › [PowerShell Command] › [PowerShell Command] › [Deobfuscated PS] › [PowerShell Command] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Coming soon: export of this report's indicators to MISP and EDR platforms.
