Malicious
VBScript
MD5: 3be61931b79ac519b0d0f0935c54f67b
Size: 38.12 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
38.12 KB · 38,119 B
First seen
2026-07-14 08:16 · 3 months ago
Last seen
2026-07-14 08:16 · 3 months ago
Last analysis
2026-07-14 08:16 · 3 months ago
Hashes
MD5
3be61931b79ac519b0d0f0935c54f67b
Sha1
a2ab5a2fd3e06bd448e327501cbea973d9368f2b
Sha256
bd195a5d90edbe3a6c10ea336573aec277c199ebf797aed58bd10d7c46d805f1
Sha384
5edb5969a2927ee3e7ec987ea810cafbd25c0d7e82613b61a8a8dbbbb482be880e85235f1d5572615aee40c2c4dd0259
Sha512
a7be0a954a58f0eb58dd06d428e7b0d0f16adfc7b2fa514d34ba83a19964413b6d82445e8c903fb05918723aba9aed53312299019c8469503cef36c72c99e6ee
SSDeep
96:q0aBRkGCvQCQ8CZCJBRAFiC0CB8Fo03Av103WFuBRpNBRqiXRDo+BRNBRjqBRy:u+K0Q90XLnBnVI4
TLSH
7803E96BC1CD81A26BE2CC595C94849429AB4727A240EF273C2CD3C1DF66972EDF2707
5 malicious · 7 files
VBS3be61931b79ac519b0d0f0935c54f67bT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
B64[Base64-Block@0x00007492]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes
Path
scr:vbs>enc:b64
Shape
scr:vbs>enc:b64
2 nodes