Malicious
VBScript
MD5: 15ff6b69fae0cba9835a159281c794f1
Size: 38.56 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
38.56 KB · 38,562 B
First seen
2026-07-14 08:46 · 3 months ago
Last seen
2026-07-14 08:46 · 3 months ago
Last analysis
2026-07-14 08:46 · 3 months ago
Hashes
MD5
15ff6b69fae0cba9835a159281c794f1
Sha1
5eccd7a84ab8b4051b160b012ecc0082fa6c65e1
Sha256
c478f13eefa74178e585ec29988ab6bc045077b3db9dea930109793716928fad
Sha384
56488e71657cfe2c98b5d1a7bdf341608c7b802cabc7511f7fbe3bc2130f09dd96ecf85e02e9bd58a66470d5880ca2ff
Sha512
2f693084ee6cd50b5508c5af3654156ef6eb71ab6630c2f6beb8dfb6838af3c7f0570fdcc4dae7e0561c25a6093213802df82982c37e0ff0bad4406e6db44a89
SSDeep
384:KqnrfqnFBbAQAdAAAYA5A4ALAphARAdqnB4kT7qnoqnu:Rnryn8nB4kT2nHnu
TLSH
7003EBA450E8BDB9496E29FC9001F266541241CDBA15812D70EE5EE35F3239DAE1A3FC
5 malicious · 7 files
VBS15ff6b69fae0cba9835a159281c794f1T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
B64[Base64-Block@0x0000748C]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes
Path
scr:vbs>enc:b64
Shape
scr:vbs>enc:b64
2 nodes