Malicious
Malicious
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
52378ad598c84a7a1c7f067081b072e1
Sha1
08090821817ee066ad162d7814e84344341f168f
Sha256
0db5f977a520eb406d2322be4d1443c84994c0246a50d93f4546dc2bcda3a58f
Sha384
731f95f539ffa97106d6b7306eca75b20a72e1a5e67e85682a2880c146cebd4be2613203915347ffba535755da57e7b3
Sha512
662341090b48df4ea50559680b0b7e8bfaf5edc61c0814a3803c73e89b5f33f660706590d352b87436d045f3dbeb403e4c98338cd1618dcdc503e2f9c00fd14b
SSDeep
49152:hrkZqaC0s27+CkH2bFdllMOHShshFhhxK1omSWaX9uerxNjPdN0NDi2kyR1a8fKl:hk
TLSH
3E96F55B93D403EE01B2B106E84D3969FA12C4BC6B3693652D58793D33B6638933E5F8
File Structure
52378ad598c84a7a1c7f067081b072e1
Malicious
52378ad598c84a7a1c7f067081b072e1.deobfuscated.vbs
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #2

http://ip-api.com/csv/?fields=countryCode
URLs in VB Code - #3

https://qmlab1.com/assets/img/katyusha2
URLs in VB Code - #4

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #1

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #2

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #3

https://qmlab1.com/assets/img/katyusha2
URLs in VB Code - #4

http://ip-api.com/csv/?fields=countryCode
52378ad598c84a7a1c7f067081b072e1 (9.03 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙