Malicious
Malicious

42f7945ec75544a0474ad1ec9ca57f36

Share on LinkedIn Add to favorites
Re-Scan
Delete
VBScript
MD5: 42f7945ec75544a0474ad1ec9ca57f36
Size: 1.13 MB
text/vbscript
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
42f7945ec75544a0474ad1ec9ca57f36
Sha1
146633200b53d65d7d45fdba7d341160d7f8f18e
Sha256
196f53a2d6b267d8ea1e590e1a45d89797df3228fe9de435593df3daa94e8cf2
Sha384
625c35a67527f1bbcc541fe3ee297e958f323132fd6364df66f93ead416446083297d8ef3fc08ac56dc9c42526f8e6b4
Sha512
4a723f783e82a9040f8906cbf25ec91a004bf2951a6e5a8588521fc1df15198223a7d22e40a5abfd258098ac62f3f4a7a245ed54d340bb57be07fbc4dcc34c8e
SSDeep
384:e++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++z:hu
TLSH
0D3541C804BF19D9B0C8A0C87AFE79C6B85F4D05412FBE82E5467A94C2DAE6CF4511BD
File Structure
42f7945ec75544a0474ad1ec9ca57f36
Malicious
42f7945ec75544a0474ad1ec9ca57f36.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:saltbox"
Deobfuscated PowerShell

Invoke-Expression $env:saltbox
Deobfuscated PowerShell

Invoke-Expression $env:saltbox
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:saltbox"
42f7945ec75544a0474ad1ec9ca57f36 (1.13 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙