Malicious
4713cea293132831a83cdb6ecf9d7637
VBScript
MD5: 4713cea293132831a83cdb6ecf9d7637
Size: 1.03 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.03 MB · 1,026,950 B
First seen
2026-07-20 14:16 · 3 months ago
Last seen
2026-07-20 14:16 · 3 months ago
Last analysis
2026-07-21 03:18 · 3 months ago
Hashes
MD5
4713cea293132831a83cdb6ecf9d7637
Sha1
7e6fc1213ce2ca016d2d577d09a0c91d9f47a533
Sha256
356106324c797ba967a2a8cde2156e866fe008332046747866efa82a99e62083
Sha384
a2c3baab7f2662d40839c5279b251e02ac8559aeec004ac02f2b993d0ad5ddbc7944a1e7f3911415203c60f7dfffb859
Sha512
d3977879b765353bc9f764ce5aaf5360f75c24cbd9204c7ecc9f270bcfd3f43f8f7fab2556e6ff3998eb6ad874cd1880dacafe8793e67984c6e3a255f4bb280d
SSDeep
384:Sa5xWnGmS7P5BmxnJeHc6/wpGxOhSFppQV8+Vw:So
TLSH
DE2551149CCF243AEA6D214B198DFD00649A2F01CDFFBC7B66B02E1246526F46DD26DB
5 malicious · 5 files
VBS4713cea293132831a83cdb6ecf9d7637T1027 · T1059.001 · T1059.005
BIN4713cea293132831a83cdb6ecf9d7637.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBS4713cea293132831a83cdb6ecf9d7637T1027 · T1059.001 · T1059.005
BIN4713cea293132831a83cdb6ecf9d7637.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
4713cea293132831a83cdb6ecf9d7637 › 4713cea293132831a83cdb6ecf9d7637.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
4713cea293132831a83cdb6ecf9d7637 › 4713cea293132831a83cdb6ecf9d7637.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account