Malicious
4db7fa60c2a0ba9020d3cedbb41361cf
Tar Archive
MD5: 4db7fa60c2a0ba9020d3cedbb41361cf
Size: 112.64 KB
application/x-tar
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
112.64 KB · 112,640 B
First seen
2026-10-14 15:45 · 11 days ago
Last seen
2026-10-14 15:45 · 11 days ago
Last analysis
2026-10-14 15:45 · 11 days ago
Hashes
MD5
4db7fa60c2a0ba9020d3cedbb41361cf
Sha1
bbd16365503d5bf0b9d781ef17213ec3758edf7f
Sha256
6a86ff915e5bcc0d7bb201cbfadc295ccfe06c8c62d1a1562223ef618a2f8269
Sha384
23b7200bbf2b0856040ae4247c85a26c246588d5036f95cc17377beb9736b2429d2be00e0a59a9691914542bc0720e33
Sha512
54398d09095765434512beb40cf866019ce5322497d8fa0d0fd2a407ad66fc91ea3f08823062216ac10df23381179d39cf39cf6f123d3237c4ccdc7b6ef53f38
SSDeep
3072:A0lKAxY6hOCcaOP2vjtWvJ/mQBAINnO3wzw:A0cAxY6hOCcaOUxWvlGmw
TLSH
73B31A62D92D0D87CD0F27BAED665B51F6BC81030E1770A1BFD8434C65069BCA3BDA29
Detection
Symbol obfuscation
Low
4 malicious · 4 files
TAR4db7fa60c2a0ba9020d3cedbb41361cfT1027 · T1059.005
VBS4db7fa60c2a0ba9020d3cedbb41361cf.deobfuscated.vbsT1059.005
VBSNew-order35242637337.vbsT1027 · T1059.005
VBSNew-order35242637337.vbs.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
arc:tar~T1027~T1059.005>scr:vbs~T1027~T1059.005
Shape
arc:tar>scr:vbs
malicious
2 nodes
Path
arc:tar~T1027~T1059.005>scr:vbs~T1059.005
Shape
arc:tar>scr:vbs
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential4 malicious · 4 files
TAR4db7fa60c2a0ba9020d3cedbb41361cfT1027 · T1059.005
VBS4db7fa60c2a0ba9020d3cedbb41361cf.deobfuscated.vbsT1059.005
VBSNew-order35242637337.vbsT1027 · T1059.005
VBSNew-order35242637337.vbs.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
4db7fa60c2a0ba9020d3cedbb41361cf
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account