Suspicious
Suspect

VBScript
MD5: 477af19f73385b460429c67ecdf06223
Size: 4.96 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 477af19f73385b460429c67ecdf06223
Sha1 4cd5dd9c3b8c895eea42e3eb360fb2c2f78e9ee8
Sha256 1311aed7b08093746c808edea41d40fb2e8547a1bd86a2516cf7bf4f1f2075fd
Sha384 3228760fce59c029faed2d5f65a5ddca639d89e2b1dbf0be4bcbb4f94aca1a22e16665a41fe17ed8885cc80a148a0a4f
Sha512 06327e199388bfce87fe9bcbe5f26e07a7ccf8b8746678f0ab399ec006303797f61f8f0bd6f7784550901dfad3270434c89a3fa8f37c8f8115b436f56ddcbfc9
SSDeep 49152:YlDpd9rbLX57S7Aa/khDVtpb5Sb6z8haR73B3Spn6K:1r
TLSH 2F36E0CE7E4D5A88888632F965158662F2CD83D17305DBB2FD7CC950B3C58B8DA6B381
477af19f73385b460429c67ecdf06223
Config. Field Value
URL #1 http:/huhuhuhuhuhuhuhuhuhuhu
URL #2 http:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
477af19f73385b460429c67ecdf06223
Config. Field Value
URL #1 http:/huhuhuhuhuhuhuhuhuhuhu
URL #2 http:/huhuhuhuhuhuhuhuhuhuhu
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙