Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
32 malicious · 32 files
VBS3f691c4d5e1b53d16964d30e35863f77VBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS[PowerShell Command].deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS[PowerShell Command].deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS3f691c4d5e1b53d16964d30e35863f77.deobfuscated.vbsdeobfuscated · VBScriptT1059.005
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
file:huhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
file:huhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
32 malicious · 32 files
VBS3f691c4d5e1b53d16964d30e35863f77VBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS[PowerShell Command].deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS[PowerShell Command].deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS3f691c4d5e1b53d16964d30e35863f77.deobfuscated.vbsdeobfuscated · VBScriptT1059.005
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
URLs in VB Code - #5
URIsuspect
file:huhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
URLs in VB Code - #6
URIsuspect
file:huhuhuhuhuhuhu
3f691c4d5e1b53d16964d30e35863f77
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Coming soon: export of this report's indicators to MISP and EDR platforms.
