Malicious
Malicious

VBScript
MD5: 95bf9a3d79496b9061d703aa625daa7d
Size: 74.58 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 95bf9a3d79496b9061d703aa625daa7d
Sha1 633aa0176cc6cc554d2ae68b6a1addd184968dbd
Sha256 a8366bc01f3cdc7c41a5d08ef5e34bf8c6888e205f0c70892e7fa5a1bde2a3bb
Sha384 7cbd155756f6440a120afcd00ceac5ae2605914b47d23f22b9b398c87ce819f9ae631ae1bdbbde88537db0230f4ca1a0
Sha512 37d30febc0e7736aea7404510daa15cdf33c8305cfd22abf9772d540c60dcbc26172c84eb81da70a4e2e166d5c91c93fd7370d1fe8fb7fc7454e5da7149e0d1d
SSDeep 1536:wm2Nnl280fQP5973X7KG0XCmrSMz6MMwLw0f0BWwKPjWlfx06N6UY4wKo/pEjsBX:gl28UQP5hX7KG0XCmrSMz6MMwLw0f0BI
TLSH 2573A3B9B7866A201920F09DBEBD6349DD09C3B4F04E4EB46F019D2F6620C45FD2967E
95bf9a3d79496b9061d703aa625daa7d
Malicious
95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
95bf9a3d79496b9061d703aa625daa7d
Malicious
95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
No malware configuration was found at this point.
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [PowerShell Command] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [Base64-Block]
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [Deobfuscated PS]
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [Deobfuscated PS] › [PowerShell Command]
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
95bf9a3d79496b9061d703aa625daa7d › 95bf9a3d79496b9061d703aa625daa7d.deobfuscated.vbs › [Command #0] › [Base64-Block] › [Deobfuscated PS]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙