Malicious
431e9c678364bff9f3dafbfc8d685329
VBScript
MD5: 431e9c678364bff9f3dafbfc8d685329
Size: 5.36 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
5.36 MB · 5,356,070 B
First seen
2026-07-09 09:48 · 3 months ago
Last seen
2026-07-09 09:48 · 3 months ago
Last analysis
2026-08-31 23:24 · one month ago
Hashes
MD5
431e9c678364bff9f3dafbfc8d685329
Sha1
32ff469b1b845de37babb1dbddf43a6142aa9c3b
Sha256
b60bf8c65bfee063e53cb392d5c8c62e63a5bd08cc4ea9494d35cafec918e372
Sha384
c9b66abedad67330e722a453abde89b59d510b897668488f1b189643c81cac49766419e96d92b48ae59f6e176303a264
Sha512
825314c239d3230889907c73d3bd60d217f22fac672c70bb2678baac73cd7cffee497837e73f3befc5f8db80d7ada36fb512e249d48f8e119f15f3bce8f6dbe7
SSDeep
49152:/2QeVQaRm1w57xCKHYL/lwZuOfxqOXq9lp8nNN9xQGV5LUTw0lgNz9Cqv/9T:e
TLSH
EF4602F493EC3ECE27ACBA15F694BF2D8D9892C7145C034F6E4D64812AE36259C93C94
1 malicious · 1 file
VBS431e9c678364bff9f3dafbfc8d685329T1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005
Shape
scr:vbs
technique1 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 1 file
VBS431e9c678364bff9f3dafbfc8d685329T1059.005
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
431e9c678364bff9f3dafbfc8d685329
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
431e9c678364bff9f3dafbfc8d685329
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
431e9c678364bff9f3dafbfc8d685329
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account