Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
26 malicious · 26 files
VBS4ee6ac37f2c5aa8511523cc31a7e1d2bVBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
VBS.subscript.vbscode extracted · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS.subscript.vbscode extracted · VBScriptT1059.005
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
26 malicious · 26 files
VBS4ee6ac37f2c5aa8511523cc31a7e1d2bVBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbsdeobfuscated · VBScriptT1059.005
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShellT1059.005
PS1[PowerShell Command]code extracted · PowerShellT1059.005
VBS.subscript.vbscode extracted · VBScriptT1059.005
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
PS1[PowerShell Command]code extracted · PowerShell
PS1[Deobfuscated PS]deobfuscated · PowerShell
VBS.subscript.vbscode extracted · VBScriptT1059.005
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
4ee6ac37f2c5aa8511523cc31a7e1d2b › 4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbs › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
4ee6ac37f2c5aa8511523cc31a7e1d2b › 4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbs › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
huvuythuhuhuhuhuhuhuhuhuhuhu
4ee6ac37f2c5aa8511523cc31a7e1d2b › 4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbs › [Deobfuscated PS] › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
4ee6ac37f2c5aa8511523cc31a7e1d2b › 4ee6ac37f2c5aa8511523cc31a7e1d2b.deobfuscated.vbs › [Deobfuscated PS] › [Deobfuscated PS] › [Deobfuscated PS] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Coming soon: export of this report's indicators to MISP and EDR platforms.
