Malicious
VBScript
MD5: 1c34c387ea28ebbe173fc0bcae0a2d86
Size: 6.57 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
| MD5 | 1c34c387ea28ebbe173fc0bcae0a2d86 |
| Sha1 | 33efcd8c290df171da5f10924dab585b8be8a115 |
| Sha256 | 0cba8f95a87418faf019a814d7a277762786b89d4dc04af045d02a39329a2293 |
| Sha384 | 3f3c058f605578e7e3aae3644381dd1085532f8146aac8e43df34b0e75807f11ee823ca6144e39d6e403f39c3cb6acbe |
| Sha512 | 1666d132544e0aad0bf472ac6c4c80afda1c7f2bb22b0d60ad44d2292937eac672c28098cbbe1dc602996df5a2d31f263d2fc8ed64de5d9f385fa479b524a60e |
| SSDeep | 96:TPzx3n3aS0bTXRS/lq/Mh73h/9GZEuJdFtS5X+wo+iZdFYo+7gpafs1tyOjckdgO:Lzh336XRSQykJQ5XIt/0Gl6RzE |
| TLSH | 5CD13A8CE1FB6BDE6C332BE5588C2C8D640852B17D04713EE8A574D0AD7686CE1F9434 |
Malicious
Malicious
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Malicious
Malicious
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86
URLs in VB Code - #3
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86 › 1c34c387ea28ebbe173fc0bcae0a2d86.deobfuscated.vbs › [Command #1] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86 › 1c34c387ea28ebbe173fc0bcae0a2d86.deobfuscated.vbs › [Command #2] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
1c34c387ea28ebbe173fc0bcae0a2d86 › 1c34c387ea28ebbe173fc0bcae0a2d86.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.