Malicious
6fa0ee9e3387c9068eea099ee13c252c
VBScript
MD5: 6fa0ee9e3387c9068eea099ee13c252c
Size: 1.77 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.77 MB · 1,770,035 B
First seen
2026-08-25 14:45 · 2 months ago
Last seen
2026-08-25 14:45 · 2 months ago
Last analysis
2026-09-03 18:08 · one month ago
Hashes
MD5
6fa0ee9e3387c9068eea099ee13c252c
Sha1
4a5aad1532da98d38060aa1c958eddb32fc37b3e
Sha256
0f1351b04bb487803eabba4b6b64baffa4f49b01874b96df1d0e98e24336828c
Sha384
be36f2192accb024de642f161395ccabb77849ade4fdb7c019a885e1b162f30ee2e5d16f924a8e8369cf4c1670c32adb
Sha512
e8631f5ce3d07f4733ba6de46864f90bda34886b7cb89dd549c89060a018361e597e2113278ac26f72e8d2505e6bebec38c0d8e1f0ca94b0f7c4c371b4a42f03
SSDeep
24576:HfcH+fYpbGSg0+RwwX6XVeqsI3hmExxGg9lavqVvG:3We
TLSH
36852B826CD08CF0F9424514D483990FC3FBCE1A96339CAEA954B8D3A99F68F55E50E7
Detection
Symbol obfuscation
Very high
2 malicious · 2 files
VBS6fa0ee9e3387c9068eea099ee13c252cT1027 · T1059.005
VBS6fa0ee9e3387c9068eea099ee13c252c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS6fa0ee9e3387c9068eea099ee13c252cT1027 · T1059.005
VBS6fa0ee9e3387c9068eea099ee13c252c.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
6fa0ee9e3387c9068eea099ee13c252c
Trace COM ordonnée
UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
6fa0ee9e3387c9068eea099ee13c252c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account