Malicious
4f87190a4d9e9734666e8d4cc30e9ed5
VBScript
MD5: 4f87190a4d9e9734666e8d4cc30e9ed5
Size: 1.28 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.28 MB · 1,278,489 B
First seen
2026-07-16 07:17 · 3 months ago
Last seen
2026-07-16 07:17 · 3 months ago
Last analysis
2026-07-16 14:10 · 3 months ago
Hashes
MD5
4f87190a4d9e9734666e8d4cc30e9ed5
Sha1
e610937e894dcdcbdffcb9dc40f9ee426dd1e4fa
Sha256
2f06ba5ddac4670091df7015f9b98d5db9f616a326af8fe788f98890f3957536
Sha384
3bcb4db90d9998be1b5ccd77c00005927b5fe0affa73c242b63d09ca7ff221db35a13c69556265e080d77efbb7da8467
Sha512
ba6297749d5af17edc24e555490fe5540949f1baa557269bf0e4ddf3e26691c6941e8a81333bb42e610d8d094ca899590bcb5652a607fb82e8ad85fe57014c11
SSDeep
24576:1xUZ2uFwi0sRpe5Kg32ennjjvvDbBlpuCDliyq0RoXAjYKnpV8khP8WMNk/:15VJmennjz7bm4EAjp2khqc
TLSH
8C453361983A3A7E0EFD91F1387B1F083AA41FD1C4E6E5D072AD94CB4F57A518813D2A
10 malicious · 13 files
VBS4f87190a4d9e9734666e8d4cc30e9ed5T1027 · T1059.001
B64[Base64-Block@0x0000027E]
GZ[Base64-Block-Decoded]T1027 · T1059.001
PS1file_0.binT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
B64[Base64-Block@0x00000245]
BIN[Base64-Block-Decoded]
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
scr:vbs~T1027~T1059.001>arc:gz>scr:ps1~T1027~T1059.001
Shape
scr:vbs>arc:gz>scr:ps1
malicious
3 nodes
Path
scr:vbs~T1027~T1059.001>scr:ps1~T1027~T1059.001>enc:b64
Shape
scr:vbs>scr:ps1>enc:b64
malicious
3 nodes
10 malicious · 13 files
VBS4f87190a4d9e9734666e8d4cc30e9ed5T1027 · T1059.001
B64[Base64-Block@0x0000027E]
GZ[Base64-Block-Decoded]T1027 · T1059.001
PS1file_0.binT1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
BIN[Base64-Block]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
B64[Base64-Block@0x00000245]
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account