Malicious
7d9e2406c263241663d5072d8941bc23
VBScript
MD5: 7d9e2406c263241663d5072d8941bc23
Size: 171 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
171 B · 171 B
First seen
2026-10-21 12:16 · 4 days ago
Last seen
2026-10-21 12:16 · 4 days ago
Last analysis
2026-10-21 12:16 · 4 days ago
Hashes
MD5
7d9e2406c263241663d5072d8941bc23
Sha1
4f9da5c67d5f2758c666bc14806d3f6f0bf35745
Sha256
8a4d7dbb689aa07e192d065392c4ead7a0e2ecbc7cfbd96fc67f0383d286ced5
Sha384
10589e1bdf67ae5042ba15f1c51f17c182e19c742c3052b168eb2443831764aa1daadd8a957e4d0d35ac111f46a92f2b
Sha512
82fd63fc5a026ec2078ffdec7572b8ff8da5ca4caaaf8c34ff6179a44184b2df4935fd9b4939973fa81917c2a388d1b2d6743ab954b7214fccf3bf7be56ac872
SSDeep
3:jtSHFoFEm86oQ/FERMQsrtNsF22xA/dAcAAHVDzWf8cLczY+83n2UMpeFCpFCvy:jtiGNht1xGYCxmDzWf8cLczY+832Zrsy
2 malicious · 2 files
VBS7d9e2406c263241663d5072d8941bc23T1027 · T1059 · T1059.005
VBS7d9e2406c263241663d5072d8941bc23.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS7d9e2406c263241663d5072d8941bc23T1027 · T1059 · T1059.005
VBS7d9e2406c263241663d5072d8941bc23.deobfuscated.vbsT1059.005
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
7d9e2406c263241663d5072d8941bc23
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
7d9e2406c263241663d5072d8941bc23
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
7d9e2406c263241663d5072d8941bc23
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account