Malicious
Malicious
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
340f81a1a540929d8ed6e1be12808631
Sha1
85cfe5c05c45b6b75ccbad8b09ad12c2cb996ea0
Sha256
5825bea8a9944feb0d998de329156bc600016ecab00b34b1a76f20bb5d82e116
Sha384
3674b815cafaf72b27b1196c8e5edcdd3792c1c522d86cad6eb81d27b8e170acf60000fcb04981864315a1dcd29ef9db
Sha512
e41f58c7fbecb2786eca1f2b3db9db26f72572d38f7e329c63795e49b8711d6dd0a4e2f20073e7009ba6e52891d1cb71cc746892952fbdb615a9fe0069122195
SSDeep
49152:M48XyN/qlZCwfk4464GhS5wY3j8n+HCqTNf9fTz8IGh7gkhkTk+8p+zFjp6PIOqS:7ox
TLSH
0896F55B93C503EA11B2B106E84D3969F712C4BC6B3693252D58B93D33B6638873E5F8
File Structure
340f81a1a540929d8ed6e1be12808631
Malicious
340f81a1a540929d8ed6e1be12808631.deobfuscated.vbs
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #2

http://ip-api.com/csv/?fields=countryCode
URLs in VB Code - #3

https://qmlab1.com/assets/img/katyusha2
URLs in VB Code - #4

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #1

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #2

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #3

https://qmlab1.com/assets/img/katyusha2
URLs in VB Code - #4

http://ip-api.com/csv/?fields=countryCode
340f81a1a540929d8ed6e1be12808631 (8.96 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙