Malicious
VBScript
MD5: 9de33da38dda2613746cd7a30d594ced
Size: 270.48 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
270.48 KB · 270,478 B
First seen
2026-07-22 13:46 · 3 months ago
Last seen
2026-07-22 13:46 · 3 months ago
Last analysis
2026-07-22 19:32 · 3 months ago
Hashes
MD5
9de33da38dda2613746cd7a30d594ced
Sha1
e20fd42d51f311e2299385be6be198f75f62a81e
Sha256
9f6d15bb97ea15e7851a18adff64f76cd1dad6333e61fd59890d9d37157366f4
Sha384
d60bf03ec71f7205a67bd40141ad9ccb950dbf4940a6d65a84eed381f85e6d17b74cf1d08725e3019f757154f2d53d71
Sha512
aa6201848512c84a19f6bd58e2c3e460e97115e0e1213a6d906ab811541f1dcc528609c0b45720b32e3838d1dee2ccaf6e4a140e1575d8310655b143cb2c0fc5
SSDeep
1536:1qNNNqNNNNNNNqNNNNNNNNNqNNNNqNNNNNNNNNNNNNNNqNNNNNNNNNNNNNNNNNNo:W
TLSH
5544C986F48F790A2097E8BFC0DE40E121EB486EB8C5ED68A1F9ED817535E2D051C81E
11 malicious · 11 files
VBS9de33da38dda2613746cd7a30d594cedT1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes