Malicious
Malicious

6771da4e0560e9e40cb02bba817a15d6

VBScript
|
MD5: 6771da4e0560e9e40cb02bba817a15d6
|
Size: 25.14 KB
|
text/vbscript

DeObfuscated
VBScript
T1059.005
VBS Execute Sub-Script
Obfuscated
WScript.Shell
MSXML2.ServerXMLHTTP.6.0
Print
General
Structural Analysis
Config.1
Yara Rules99+
Sync
Community
Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
6771da4e0560e9e40cb02bba817a15d6
Sha1
ab027b2508df105f78b1c3682865d5d221ac0dce
Sha256
55f467d6540ec879609e242e19b68801761c7b8f63efff47e2711672c8f6d63e
Sha384
6f08cf4c75b23f41aeaf73f5a0cbb0796b5f85658b3fea8884c35b6a0ecda875807112b270d32e5df60e73970a065eeb
Sha512
8dcc549ba5f9cbeec7cdd7a04dbd7cf7db9b131bd0f7c1a92c12141eec9f1d53c1905f6363b00cc59971c95a575d491708abc3961a55c37d3d952de710f85543
SSDeep
384:jnmqOAeKXkyo8opkma/EqAaQalkIIFi02VRlGdIoMJm/OyhCm64dF7chJBmf0Zow:bepkRTFNuPE
TLSH
AFB2A9930E39FD804198A934BD637092E2E7DF5E6195522305C35BA927228F94FE87F3
File Structure
6771da4e0560e9e40cb02bba817a15d6
DeObfuscated
VBScript
T1059.005
VBS Execute Sub-Script
Obfuscated
WScript.Shell
MSXML2.ServerXMLHTTP.6.0
Malicious
6771da4e0560e9e40cb02bba817a15d6.deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
6771da4e0560e9e40cb02bba817a15d6
Malicious
.executed
Malicious
.subscript.vbs
VBS Execute Sub-Script
VBScript
T1059.005
WScript.Shell
MSXML2.ServerXMLHTTP.6.0
DeObfuscated
Obfuscated
Malicious
.subscript.vbs.deobfuscated.vbs
DeObfuscated
VBScript
T1059.005
Malicious
Malware Configuration - URLs in VBA/VBS Code
Config. Field
 Value
URL #1

https://gxsearch.club/loja/arquivos/download/base.php
6771da4e0560e9e40cb02bba817a15d6 (25.14 KB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙