Malicious
Malicious

9eb7e77e3f95928b1e8b10bd298b5f12

VBScript
|
MD5: 9eb7e77e3f95928b1e8b10bd298b5f12
|
Size: 2.22 KB
|
text/vbscript

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
9eb7e77e3f95928b1e8b10bd298b5f12
Sha1
2ea5b608c397f6823a1fb6a5d386630d9b3bc660
Sha256
faacba7c22475a2c1f677f34049e9852b6e2e57287f6f420b4ab71adfee9aed4
Sha384
da91a92de887f0686a4f26ab6243a5bfb23fca46f0c86fc2cd6b601d8e359ebe376d72b2ed3842d7b6b6412f3f33bf3f
Sha512
9303d0193ac913b0386f5df3a28716443f4bef7f53b214d04bcaee7cc207864e81fc877a12046b4c6ad3ef42c79331b5e473901e74d73e7186c5d7d8c6d31984
SSDeep
24:XRPzBMxWNbuCUlMkoOMcMO3HRMt3Th7uM6lOMonN3NOJ/gAsEOwv80j1HUhG0f:XsWNy9vQV7xN4J4AsEOsgX
TLSH
0441018FFA065524C53347A58A99EC1EF850987387A42096FD9C54C28F323BDF2942EE
File Structure
9eb7e77e3f95928b1e8b10bd298b5f12
Malicious
9eb7e77e3f95928b1e8b10bd298b5f12.deobfuscated.vbs
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

http://152.42.181.59:8001/TuanAnh.xlsx
URLs in VB Code - #2

http://152.42.181.59:8001/test.png
URLs in VB Code - #3

http://152.42.181.59:8001/test.ps1
URLs in VB Code - #4

http://152.42.181.59:8001/test.vbs
9eb7e77e3f95928b1e8b10bd298b5f12 (2.22 KB)
File Structure
9eb7e77e3f95928b1e8b10bd298b5f12
Malicious
9eb7e77e3f95928b1e8b10bd298b5f12.deobfuscated.vbs
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
URLs in VB Code - #1

http://152.42.181.59:8001/TuanAnh.xlsx

9eb7e77e3f95928b1e8b10bd298b5f12
URLs in VB Code - #2

http://152.42.181.59:8001/test.png

9eb7e77e3f95928b1e8b10bd298b5f12
URLs in VB Code - #3

http://152.42.181.59:8001/test.ps1

9eb7e77e3f95928b1e8b10bd298b5f12
URLs in VB Code - #4

http://152.42.181.59:8001/test.vbs

9eb7e77e3f95928b1e8b10bd298b5f12
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙