Malicious
VBScript
MD5:
Size: 0 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
The file 68e37e3f033c82c0b8fb131904c2c943 is a VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 25 embedded or derived files. It matches 44 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- —
- MD5
- -
- Verdict
- Malicious
- File type
- VBScript
- MITRE ATT&CK
- T1059.005
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
26 malicious · 26 files
VBS68e37e3f033c82c0b8fb131904c2c943T1059.005
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
VBS68e37e3f033c82c0b8fb131904c2c943.deobfuscated.vbsT1059.005
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1059.005
PS1[PowerShell Command]T1059.005
BIN.executed
VBS.subscript.vbsT1059.005
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BIN.executed
VBS.subscript.vbsT1059.005
Deobfuscated PowerShell
UNKNWOWNmalicious
vrddsjhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
vrddsjhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
vrddsjhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
[Unmanhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential