Malicious
6d736c32770ad414f99c9d83382ff876
VBScript
MD5: 6d736c32770ad414f99c9d83382ff876
Size: 1.15 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.15 MB · 1,146,796 B
First seen
2026-07-16 07:31 · 3 months ago
Last seen
2026-07-16 07:31 · 3 months ago
Last analysis
2026-07-19 04:28 · 3 months ago
Hashes
MD5
6d736c32770ad414f99c9d83382ff876
Sha1
fce7bbf8b3b7e08479267234ab0fa4af82c797e0
Sha256
839368bea44ee877cf7956a2229fd42b4457a1acd1170820b276669139e5ae3e
Sha384
bda3513f9fd7fa9f7a37b41fdb194d0f2196c535722ae368fb2aeba41bfc7720cbae989632de5c8247ec59c68d635eba
Sha512
f1991f45fb58872b0688b9dd3d3f07cfa304bab057f04d1e4c8c2b33824d039aac3f49caf57ff758878d2e8f3599b865aa404427ba48ec37ae26f96d8ef98951
SSDeep
384:eOG9p0Ue45TiRljroVYE3X6NDs4xjlsOIO1:cpgsrXC/
TLSH
403543B1855A5F02EDF6B481FDEA3F0F51BE03834B9E596B54ACB441905CA203B9CEB4
5 malicious · 5 files
VBS6d736c32770ad414f99c9d83382ff876T1027 · T1059.001 · T1059.005
BIN6d736c32770ad414f99c9d83382ff876.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBS6d736c32770ad414f99c9d83382ff876T1027 · T1059.001 · T1059.005
BIN6d736c32770ad414f99c9d83382ff876.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
6d736c32770ad414f99c9d83382ff876 › 6d736c32770ad414f99c9d83382ff876.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
6d736c32770ad414f99c9d83382ff876 › 6d736c32770ad414f99c9d83382ff876.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account