Deep Malware Analysis of 9749cfb52ba78a1ab0618da7f9e899d6 | md5: 9749cfb52ba78a1ab0618da7f9e899d6 | Executable | PE (Portable Executable) | Win 32 Exe | x86 | Obfuscated | VBScript Encoded | .Net Obfuscator | .Net Reactor | .Net | PDB Path | WScript.Shell

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

PeID

Borland Delphi 7 - Nstd EP - ASL sign Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

URLs in VB Code - #1 URIsuspect

http:/huhuhuhuhuhuhu

URLs in VB Code - #2 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

URLs in VB Code - #3 URIsuspect

http:/huhuhuhuhuhuhuhuhuhuhu

PDB Path PATH

thuhuhuhu

PDB Path PATH

D:\Prohuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential