Malicious
General
Structural Analysis
Config.0
Yara Rules15
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | 48658144ff9581d9fc7a868b921803fc
|
| Sha1 | 5eab5e04b6ab2aede56ed22798e2d704ff33109d
|
| Sha256 | ad543dc5ebd2989f14c7446927b197e62124c9e4643ff5f980e0f3c04b8d009b
|
| Sha384 | 24096f047c05fb9c713f1615218a951f29702be1d4a8c2a1fcd76bb858c52489ee7378d174767888ea319cf33d103cd9
|
| Sha512 | 005e344d532b56a30e99592f5d60fe89d0f118bff2356ade11cd09c626070ae3cd9b18db69fc5c9d1f1584835f6f692f9011f484ee8c4320986a1518781e783c
|
| SSDeep | 48:nmY+iPJzFsQy4le583q8EjzQM/f4beYPEqJWGw5aewfNFoRQRBovfmk:nmlMF5subEjEMfFY3JWGAp8F0uCvfmk
|
| TLSH | CB510C92514CBA5262D5BE77857F89F862D8064C9128F7FA3D04A014A83FFD01BD4507
|
File Structure
9c5cc8a5057a73906547a2e5202f31f8502cc3692eac582a7b98b8a8cd3091cb.zip
Zip Archive
WSF File
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
9c5cc8a5057a73906547a2e5202f31f8502cc3692eac582a7b98b8a8cd3091cb.wsf
Archive Entry
WSF File
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
[Job Id=manage-nesgkcysin Name=No Name]
Malicious
[VBScript] #0
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
[VBScript] #0.deobfuscated.vbs
DeObfuscated
VBScript
Malicious
[Command #0]
PowerShell
Batch Command
PowerShell Call
DeObfuscated
Malicious
[PowerShell Command]
PowerShell
DeObfuscated
Malicious
[Deobfuscated PS]
DeObfuscated
PowerShell
Malicious
9c5cc8a5057a73906547a2e5202f31f8502cc3692eac582a7b98b8a8cd3091cb.zip (2.59 KB)
File Structure
9c5cc8a5057a73906547a2e5202f31f8502cc3692eac582a7b98b8a8cd3091cb.zip
Zip Archive
WSF File
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
9c5cc8a5057a73906547a2e5202f31f8502cc3692eac582a7b98b8a8cd3091cb.wsf
Archive Entry
WSF File
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
[Job Id=manage-nesgkcysin Name=No Name]
Malicious
[VBScript] #0
DeObfuscated
VBScript
PowerShell
Batch Command
PowerShell Call
Wscript.Shell
Obfuscated
Malicious
[VBScript] #0.deobfuscated.vbs
DeObfuscated
VBScript
Malicious
[Command #0]
PowerShell
Batch Command
PowerShell Call
DeObfuscated
Malicious
[PowerShell Command]
PowerShell
DeObfuscated
Malicious
[Deobfuscated PS]
DeObfuscated
PowerShell
Malicious
Characteristics
No malware configuration were found at this point.
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.