Malicious
Malicious

Share on LinkedIn
Print
VBScript
MD5: 30a6d68b2ea3796940497c4341d8ce6d
Size: 80.83 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
80.83 KB · 80,825 B
First seen
2025-08-26 08:01 · one year ago
Last seen
2025-08-26 08:01 · one year ago
Last analysis
2025-08-26 08:02 · one year ago
Hashes
MD5 30a6d68b2ea3796940497c4341d8ce6d Sha1 0e7613b51e5d121d1fe9a7d5d2cc134e8ad39ed5 Sha256 2b3509532532cd02f563e5129d63cc86c4b2aac21439ffbbca8d82d5319b41c1 Sha384 ae751e90037dfdb9f36f4cf2cad9ffdba133ce62d771bc7f329a1a68ef2a223b5d1cc7babe4b3dbc74182c1e86649ee6 Sha512 34092b18e40fd8da9816a02473856f610f42c771da18bf177af37ad871ba54f88e4a5fda70c010a28a05424b1f155a8057a5d4f9157f73b37a9d8b58f987be8a SSDeep 1536:T/adUjsPgsvv9JovfPWLZnTN9y6hJWBl2yBrpPqlc2Sy6yBzkr5/c967z9Yvhro2:WdUervv9JovfPWLZnTN9y6hJWBl2yBrS TLSH 4583D658D60FBAAB1F1091B9E658F357DD0AAC028947349FB3428F53ECA722D94D706C
8 malicious · 9 files
VBS30a6d68b2ea3796940497c4341d8ce6d
BIN30a6d68b2ea3796940497c4341d8ce6d.deobfuscated.vbs
SH[Command #0]
PS1[PowerShell Command]
PS1[Base64-Block]
PS1[Deobfuscated PS]
BIN[Base64-Block]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙