Malicious
2dd19c1ab7885a0c89206917adc6f03d
VBScript
MD5: 2dd19c1ab7885a0c89206917adc6f03d
Size: 2.55 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
2.55 MB · 2,551,774 B
First seen
2026-08-20 07:45 · 2 months ago
Last seen
2026-08-20 07:45 · 2 months ago
Last analysis
2026-09-02 10:50 · one month ago
Hashes
MD5
2dd19c1ab7885a0c89206917adc6f03d
Sha1
ae571089bd1a730338d072115fd05353d3d91ed6
Sha256
03d9b9675a98583ec96b59fec63059641e320cbc8774de2dfa736ab06cd008b1
Sha384
508c2c45655ac1f1af117d78149442049f285e3d9ff03e7e94917fe7ced33326a88cd86058a4392eb61188aab8dfb0b6
Sha512
af95949060971a2692ecb012da1bd1106f20eb6a41ea961ef5f3e04d00276913f32579e70f9f5b0d863acdd530357239639b8cf985dbb147013e91da452e9718
SSDeep
768:eoP5YTdCk1sFm/jlD7jBB6+/CNcgc16+CSqqB/+KcqCpi7JvvqvWVdvvaN2JIl3Y:y9
TLSH
B0C57D606F3B8975DE24FEAB617046E01BC9830A1497CB805CC6DE5B4EE5BB099BDC1C
4 malicious · 4 files
VBS2dd19c1ab7885a0c89206917adc6f03dT1027 · T1059 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential4 malicious · 4 files
VBS2dd19c1ab7885a0c89206917adc6f03dT1027 · T1059 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
2dd19c1ab7885a0c89206917adc6f03d
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account