Malicious
Malicious

Share on LinkedIn
Print
VBScript
MD5: 1c34c387ea28ebbe173fc0bcae0a2d86
Size: 6.57 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 1c34c387ea28ebbe173fc0bcae0a2d86
Sha1 33efcd8c290df171da5f10924dab585b8be8a115
Sha256 0cba8f95a87418faf019a814d7a277762786b89d4dc04af045d02a39329a2293
Sha384 3f3c058f605578e7e3aae3644381dd1085532f8146aac8e43df34b0e75807f11ee823ca6144e39d6e403f39c3cb6acbe
Sha512 1666d132544e0aad0bf472ac6c4c80afda1c7f2bb22b0d60ad44d2292937eac672c28098cbbe1dc602996df5a2d31f263d2fc8ed64de5d9f385fa479b524a60e
SSDeep 96:TPzx3n3aS0bTXRS/lq/Mh73h/9GZEuJdFtS5X+wo+iZdFYo+7gpafs1tyOjckdgO:Lzh336XRSQykJQ5XIt/0Gl6RzE
TLSH 5CD13A8CE1FB6BDE6C332BE5588C2C8D640852B17D04713EE8A574D0AD7686CE1F9434
1c34c387ea28ebbe173fc0bcae0a2d86
Malicious
1c34c387ea28ebbe173fc0bcae0a2d86.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Command #1]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Command #2]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Command #3]
[Command #4]
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙