Malicious
Malicious

5b6783deba446085ecc5686faa3e3c51

VBScript
|
MD5: 5b6783deba446085ecc5686faa3e3c51
|
Size: 509.5 KB
|
text/vbscript

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
5b6783deba446085ecc5686faa3e3c51
Sha1
1bf2ed1b7c9f34b8f8eeeb3e60572ade42ac0f34
Sha256
c7775ead0cefe9f3bd797b27640ae5a41ca29decb4e29804c0fa95d50e037d4d
Sha384
37f61aed0ece75625d314f00cf3cb16ebbeb89415a22bc954ad87e4a44d5c366bb4f4b5f8435fb19139d8d18cc2c5931
Sha512
fb9e3a540b733a615083c6644e045b8a8fb897ff879b59ba7d75274dabdcf7edeb84142ebd5825d0b4f495b59153ec8af43b6c2f1c82a5f86d21116579e9d634
SSDeep
6144:kt3kM9YbI1Gabm48QqJ+n6/v1MHGldkQjg2zIt3kM9YbI14:43kGYFt48BtLleu43kGYH
TLSH
37B42BCEBE191FB098A231B81A29F0637F34D7C1AE125FBE5C5FC68F45928D5920161B
File Structure
5b6783deba446085ecc5686faa3e3c51
Malicious
5b6783deba446085ecc5686faa3e3c51.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

https://www.javascriptfreecode.com
URLs in VB Code - #2

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
URLs in VB Code - #3

https://fonts.googleapis.com
URLs in VB Code - #4

https://fonts.gstatic.com
URLs in VB Code - #5

https://fonts.googleapis.com/css2?family=Inter:wght@400
URLs in VB Code - #6

http://www.javascriptfreecode.com
URLs in VB Code - #7

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
URLs in VB Code - #8

http://www.javascriptfreecode.com/files/video_player_manipulation_with_intersecting_observer/Water
5b6783deba446085ecc5686faa3e3c51 (509.5 KB)
File Structure
5b6783deba446085ecc5686faa3e3c51
Malicious
5b6783deba446085ecc5686faa3e3c51.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
URLs in VB Code - #1

https://www.javascriptfreecode.com

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #2

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #3

https://fonts.googleapis.com

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #4

https://fonts.gstatic.com

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #5

https://fonts.googleapis.com/css2?family=Inter:wght@400

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #6

http://www.javascriptfreecode.com

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #7

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

5b6783deba446085ecc5686faa3e3c51
URLs in VB Code - #8

http://www.javascriptfreecode.com/files/video_player_manipulation_with_intersecting_observer/Water

5b6783deba446085ecc5686faa3e3c51
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙