Malicious
Malicious

Share on LinkedIn
Print
VBScript
MD5: 95bf9a3d79496b9061d703aa625daa7d
Size: 74.58 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 95bf9a3d79496b9061d703aa625daa7d
Sha1 633aa0176cc6cc554d2ae68b6a1addd184968dbd
Sha256 a8366bc01f3cdc7c41a5d08ef5e34bf8c6888e205f0c70892e7fa5a1bde2a3bb
Sha384 7cbd155756f6440a120afcd00ceac5ae2605914b47d23f22b9b398c87ce819f9ae631ae1bdbbde88537db0230f4ca1a0
Sha512 37d30febc0e7736aea7404510daa15cdf33c8305cfd22abf9772d540c60dcbc26172c84eb81da70a4e2e166d5c91c93fd7370d1fe8fb7fc7454e5da7149e0d1d
SSDeep 1536:wm2Nnl280fQP5973X7KG0XCmrSMz6MMwLw0f0BWwKPjWlfx06N6UY4wKo/pEjsBX:gl28UQP5hX7KG0XCmrSMz6MMwLw0f0BI
TLSH 2573A3B9B7866A201920F09DBEBD6349DD09C3B4F04E4EB46F019D2F6620C45FD2967E
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell UNKNWOWNmalicious
$null huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
An error has occurred. This application may no longer respond until reloaded. Reload 🗙