Malicious
87985e687a3ad4e94e9520297f82dcaf
VBScript
MD5: 87985e687a3ad4e94e9520297f82dcaf
Size: 1 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1 MB · 1,004,529 B
First seen
2026-10-23 12:30 · 2 days ago
Last seen
2026-10-23 12:30 · 2 days ago
Last analysis
2026-10-23 12:30 · 2 days ago
Hashes
MD5
87985e687a3ad4e94e9520297f82dcaf
Sha1
43bec6d1a30d7d69023412b59729a46dc5baab59
Sha256
017134d8e673c6ee83631e4af7312be5eb437bb46f279f2cd57d4f48e51aef86
Sha384
e7fdecfe855bff322e0103a3ce51e769779fa37b719910b4d78e4ba97b1fa9523593e2732194228a760151ee61ac6928
Sha512
ca0617028275411aab114da813228407827f8d2d0fbb3d0226762a10f5da3c10a0b5d6826f32de8c2b4e22d9739e820aab5bda28109320889c02b46d0a1712b9
SSDeep
24576:NhblzLLKHXjnhPq7dOGODkwroceIpiGhWRYksyZQF06qwt/97:N36YVK2syXc
TLSH
B525CC925D953B9BCEDC654E4F0DD97F03420982072DE6C0799F715A0ABDB274BEEA00
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS87985e687a3ad4e94e9520297f82dcafT1027 · T1059.005
VBS87985e687a3ad4e94e9520297f82dcaf.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBS87985e687a3ad4e94e9520297f82dcafT1027 · T1059.005
VBS87985e687a3ad4e94e9520297f82dcaf.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
87985e687a3ad4e94e9520297f82dcaf
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account