Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
Encoded VBScript file
Size
2.4 MB · 2,400,435 B
First seen
2025-06-26 12:31 · one year ago
Last seen
2025-06-26 12:31 · one year ago
Last analysis
2025-06-26 14:01 · one year ago
Hashes
MD5 14277159da5d9608867d4262aaf66279 Sha1 4a587872e540d54f179f992cf444b36bf5438ab1 Sha256 77487e24364782173be916875eb1f459ae2f9bb839b8203da130c45c9caa7e40 Sha384 79cab83ed1473974b6b50de829e22579d5b97888363ed4d2439eae9bde111a248e554a39190a55f5060587b50ab3fa86 Sha512 b4b7644d717c534c996d5e16126d1820343891299a2e37fb53525bd0421537d787af64287097fdcd592c086b3bfc3e92bafec03488432603a964d26114ef9844 SSDeep 24576:2TbBv5rUyXV+9fDr1F7t0JtHfuuiRErTTP38ZyYY+HlUPejoneX1EjHrE0ruI3sd:IBJSc93I+/PYyPwlKVwKo0P3sY7S8YZ TLSH 73B5BE2674915D32CE71663045E7037E5186D722AB52EA0F761F12E2A8177F2CBB32E3
Detection
PeID
HQR data fileMicrosoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation
3 malicious · 28 files
VBS14277159da5d9608867d4262aaf66279
Structure
BINResources
BINPNG
BINID:0065
IMGID:1033
IMGID:1033-preview.png
BINID:0066
IMGID:1033
IMGID:1033-preview.png
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINID:0005
BINID:1033
BINID:0006
BINID:1033
BINID:0007
IMGID:1033
IMGID:1033-preview.png
BINRT_DIALOG
BINID:0000
BINID:1033
BINRT_STRING
BINID:0007
BINID:1033
BINID:0008
BINID:1033
BINID:0009
BINID:1033
BINID:000A
BINID:1033
BINID:000B
BINID:1033
BINID:000C
BINID:1033
BINID:000D
BINID:1033
BINID:000E
BINID:1033
BINID:000F
BINID:1033
BINID:0010
BINID:1033
BINRT_GROUP_CURSOR4
BINID:0064
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
VBS14277159da5d9608867d4262aaf66279.decoded.vbs
VBS14277159da5d9608867d4262aaf66279.decoded.vbs.deobfuscated.vbs
3 malicious · 28 files
VBS14277159da5d9608867d4262aaf66279
Structure
VBS14277159da5d9608867d4262aaf66279.decoded.vbs
VBS14277159da5d9608867d4262aaf66279.decoded.vbs.deobfuscated.vbs
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙