Malicious
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Tar archive
3 malicious · 8 files
TAR6ad3b2da43b3bd9f101078d38f2c9a82
BIN15200441512 15200441514
BIN15200441514 15200441514
BINpackage
JSrouter_init.js
PS1setup.mjs
JSONpackage.json
BINdist
VBStool.js
PS1[PowerShell Command]
BIN[Base64-Block]
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #16
URIsuspect
http:huhuhuhuhuhuhu
URLs in VB Code - #17
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #18
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential