Malicious
2560fce6723b594f3ac08456080dcc56
VBScript
MD5: 2560fce6723b594f3ac08456080dcc56
Size: 1.06 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.06 MB · 1,063,158 B
First seen
2026-07-02 14:46 · 3 months ago
Last seen
2026-07-02 14:46 · 3 months ago
Last analysis
2026-07-03 14:35 · 3 months ago
Hashes
MD5
2560fce6723b594f3ac08456080dcc56
Sha1
1d62f6d8b45de19ee872e40a95c5f9d78c88bdcc
Sha256
46376531988f10612187dd8c283c20022da0107bbc7a9964898f7e1dc31866f0
Sha384
1f65d431f0ec954d06c6444093dd66a6e7f53174fd391891c53fa6121f7f3d7c9c1d15cdbf05cf9356dfb2f684403837
Sha512
f0e1c5ac9533505896460e38b7bfe4514385053c1f16948bf88c2ddbc4f4eb88eae32e65be9dd9a34c8125cf2d834fc6cbd5dfb15f3d11faf79533e69ed7fcb9
SSDeep
96:7OOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOOp:2szBDx6Ksc1Rq69vUpOseSCW6Tq6N
TLSH
BB3594124406063DDE2F95D268BB860611F5310B3FE1DF657F1B7B8AA0A4A3339F7968
5 malicious · 5 files
VBS2560fce6723b594f3ac08456080dcc56
BIN2560fce6723b594f3ac08456080dcc56.deobfuscated.vbs
SH[Command #0]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBS2560fce6723b594f3ac08456080dcc56
BIN2560fce6723b594f3ac08456080dcc56.deobfuscated.vbs
SH[Command #0]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
2560fce6723b594f3ac08456080dcc56 › 2560fce6723b594f3ac08456080dcc56.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
2560fce6723b594f3ac08456080dcc56 › 2560fce6723b594f3ac08456080dcc56.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account