Malicious
64f097db5476a6798f52d518c15ea7f9
VBScript
MD5: 64f097db5476a6798f52d518c15ea7f9
Size: 169 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
169 B · 169 B
First seen
2026-10-21 12:16 · 4 days ago
Last seen
2026-10-21 12:16 · 4 days ago
Last analysis
2026-10-21 12:16 · 4 days ago
Hashes
MD5
64f097db5476a6798f52d518c15ea7f9
Sha1
9f502aed4cf48885c8fd9a6a7a89927fa7aef0ed
Sha256
ea40c4e1c80b4aa15461340594e53e4f72624be9759b624cf8d02948f158a127
Sha384
fdc50587ade80dfab128e5079d8d2bdcb50d4473a8659f6d403a6958b9e7b3ec6f561117af36f21d09507e73f264a5b5
Sha512
3963d441a8677208f44aa72a48bc72a9dbfb3066fe18316f616670521a99667bc4b9af52b9c75a9d5556f60de55fe019c515bd93631723e045a9f63583081e03
SSDeep
3:jtSHFoFEm86oQ/FERMQsrtNsF22xA/dAcAAHVDzWf8Imf5HmRwUvMfBAGb9FCpFh:jtiGNht1xGYCxmDzWf8Ic5h2GbCrsy
2 malicious · 2 files
VBS64f097db5476a6798f52d518c15ea7f9T1027 · T1059 · T1059.005
VBS64f097db5476a6798f52d518c15ea7f9.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS64f097db5476a6798f52d518c15ea7f9T1027 · T1059 · T1059.005
VBS64f097db5476a6798f52d518c15ea7f9.deobfuscated.vbsT1059.005
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
64f097db5476a6798f52d518c15ea7f9
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
64f097db5476a6798f52d518c15ea7f9
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
64f097db5476a6798f52d518c15ea7f9
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account