Malicious
VBScript
MD5: 340f81a1a540929d8ed6e1be12808631
Size: 8.96 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
8.96 MB · 8,956,503 B
First seen
2026-06-19 12:31 · 4 months ago
Last seen
2026-06-19 12:31 · 4 months ago
Last analysis
2026-06-19 15:55 · 4 months ago
Hashes
MD5
340f81a1a540929d8ed6e1be12808631
Sha1
85cfe5c05c45b6b75ccbad8b09ad12c2cb996ea0
Sha256
5825bea8a9944feb0d998de329156bc600016ecab00b34b1a76f20bb5d82e116
Sha384
3674b815cafaf72b27b1196c8e5edcdd3792c1c522d86cad6eb81d27b8e170acf60000fcb04981864315a1dcd29ef9db
Sha512
e41f58c7fbecb2786eca1f2b3db9db26f72572d38f7e329c63795e49b8711d6dd0a4e2f20073e7009ba6e52891d1cb71cc746892952fbdb615a9fe0069122195
SSDeep
49152:M48XyN/qlZCwfk4464GhS5wY3j8n+HCqTNf9fTz8IGh7gkhkTk+8p+zFjp6PIOqS:7ox
TLSH
0896F55B93C503EA11B2B106E84D3969F712C4BC6B3693252D58B93D33B6638873E5F8
8 malicious · 8 files
VBS340f81a1a540929d8ed6e1be12808631T1059.005
VBS340f81a1a540929d8ed6e1be12808631.deobfuscated.vbsT1059.005
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential8 malicious · 8 files
VBS340f81a1a540929d8ed6e1be12808631T1059.005
VBS340f81a1a540929d8ed6e1be12808631.deobfuscated.vbsT1059.005
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
340f81a1a540929d8ed6e1be12808631
URLs in VB Code - #2
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
340f81a1a540929d8ed6e1be12808631
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
340f81a1a540929d8ed6e1be12808631
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
340f81a1a540929d8ed6e1be12808631
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account