Malicious
25565bbc1ec9d7e20e97829dae14fb66
PowerShell
MD5: 25565bbc1ec9d7e20e97829dae14fb66
Size: 15.08 KB
application/x-powershell
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
15.08 KB · 15,084 B
First seen
2026-10-14 09:15 · 11 days ago
Last seen
2026-10-14 09:15 · 11 days ago
Last analysis
2026-10-14 09:15 · 11 days ago
Hashes
MD5
25565bbc1ec9d7e20e97829dae14fb66
Sha1
9a9b67ca1ebfebb136e64952c577a2a45182a553
Sha256
95187623172779e3acfc1ba0ba73e30a5888caa189aeb40f12d6c22f554b3533
Sha384
3a120e963c0df24827b34820b205538ff58d999703e5408c79fe256b669b27a0ed12034a3053069f4aa3cd0450e26ed1
Sha512
d567d3f0cbc9384de1e3585d16e33d31872046c850623ba4e74683442508885e28cd953eeb7bcc4f74001b53fbe3a4e234ade8277f6105e0fbc1772fe3f5406a
SSDeep
48:3VqiQKCiqiQBCX8VuumuuuuuuhL7NYQfX/ckNqiQsqiQfUCPqiQ5G:QiQKCdiQBCJmQ3ckoiQXiQMCiiQo
TLSH
526264388B50BC7083F3D18C6E04FA1385609D4BB578EC1D7D1C90539B686A64D9624F
Detection
Symbol obfuscation
Medium
3 malicious · 4 files
PS125565bbc1ec9d7e20e97829dae14fb66T1027 · T1059 · T1059.005
VBS25565bbc1ec9d7e20e97829dae14fb66.deobfuscated.vbsT1059.005
SH[Command #0]
BIN25565bbc1ec9d7e20e97829dae14fb66.comtrace
SH[Command #1]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:ps1~T1027~T1059~T1059.005>scr:bat
Shape
scr:ps1>scr:bat
malicious
2 nodes
Path
scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape
scr:ps1>scr:vbs
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 4 files
PS125565bbc1ec9d7e20e97829dae14fb66T1027 · T1059 · T1059.005
VBS25565bbc1ec9d7e20e97829dae14fb66.deobfuscated.vbsT1059.005
SH[Command #0]
BIN25565bbc1ec9d7e20e97829dae14fb66.comtrace
SH[Command #1]
No malware configuration was found at this point.
Command (COM trace) #1
UNKNWOWNmalicious
"C:\Wihuhuhuhuhuhuhuhuhuhuhu
25565bbc1ec9d7e20e97829dae14fb66
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
25565bbc1ec9d7e20e97829dae14fb66
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account