Malicious
9f1ec7bfb4c984807779264c15e5befc
VBScript
MD5: 9f1ec7bfb4c984807779264c15e5befc
Size: 1.12 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.12 MB · 1,122,304 B
First seen
2026-10-14 10:45 · 11 days ago
Last seen
2026-10-14 10:45 · 11 days ago
Last analysis
2026-10-14 10:45 · 11 days ago
Hashes
MD5
9f1ec7bfb4c984807779264c15e5befc
Sha1
4bc92b15414d9d6c1cff212982bd46dae4c07718
Sha256
737690df6e6b5b05b295557e5da604116f46e42bb33b4b457a421c9af79d44a1
Sha384
4ea03aa330633d04f4d640ae3024aa04677a4f167611b3cf76fd04f8374f05ad1c4c500608c563b52af1d14bfeb23dbd
Sha512
ce817a9af5e5a14b0c08494bdcd5eaf5441cca7308ca1767be7472fe6b88616ea5a7bb0ebad1198cc115bdfad4c7afdc386bb1cb0e54b5ceb46f874bc11bd17a
SSDeep
24576:23auT+ibpkpenlD8A8a69WZ15epvlGExpp506JpMbA0:23bdbppYA0wZ15KbpWK6bP
TLSH
91359DB047030BEAFAF95776F5F94D5C02C16EB14B60C9D8A7AE31C66534BD2BD2024A
3 malicious · 30 files
VBS9f1ec7bfb4c984807779264c15e5befcT1027 · T1059 · T1059.005
BINfile_63E18ED8CCF1
BINRoot Entry
BIN䡀䌏䈯
BIN䄦㡥䆾䅤
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
PS1䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆T1027 · T1059 · T1059.005
VBS䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆.deobfuscated.vbsT1059.005
BIN䌋䄱䜵㽾䅤䈯䕙䉨㣶㧃
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BIN䌋䄱䜵㹾䕤䏤䈯㭯䆨䐬䏤㣁㧈
BINSummaryInformation
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 2
STICH kept: 1secondary ignored: 1
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
ole:doc>scr:ps1~T1027~T1059~T1059.005>scr:vbs~T1059.005
Shape
ole:doc>scr:ps1>scr:vbs
malicious
3 nodes
Command (COM trace) #1
UNKNWOWNmalicious
ping -huhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 30 files
VBS9f1ec7bfb4c984807779264c15e5befcT1027 · T1059 · T1059.005
BINfile_63E18ED8CCF1
BINRoot Entry
BIN䡀䌏䈯
BIN䄦㡥䆾䅤
BIN䡀䈖䌧䠤
BIN䡀䌋䄱䜵
BIN䡀㬿䏲䐸䖱
BIN䡀㽿䅤䈯䠶
BIN䡀䈏䗤䕸䠨
BIN䡀䓞䕪䇤䠨
BIN䡀䕙䓲䕨䜷
BIN䡀䌍䈵䗦䕲䠼
BIN䡀䒌䓰䑲䑨䠷
BIN䡀㼿䕷䑬㭪䗤䠤
BIN䡀㼿䕷䑬㹪䒲䠯
BIN䡀㿿䏤䇬䗤䒬䠱
BIN䡀䖖㯬䏬㱨䖤䠫
BIN䡀䘌䗶䐲䆊䌷䑲
BIN䡀䄕䑸䋦䒌䇱䗬䒬䠱
BIN䡀䇊䌰㾱㼒䔨䈸䆱䠨
PS1䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆T1027 · T1059 · T1059.005
VBS䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆.deobfuscated.vbsT1059.005
BIN䌋䄱䜵㽾䅤䈯䕙䉨㣶㧃
BIN䡀䈏䗤䕸㬨䐲䒳䈱䗱䠶
BIN䡀䑒䗶䏤㾯㼒䔨䈸䆱䠨
BIN䡀䇊䌰㮱䈻䘦䈷䈜䘴䑨䈦
BIN䡀䇊䗹䛎䆨䗸㼨䔨䈸䆱䠨
BIN䡀䑒䗶䏤㮯䈻䘦䈷䈜䘴䑨䈦
BIN䌋䄱䜵㹾䕤䏤䈯㭯䆨䐬䏤㣁㧈
BINSummaryInformation
No malware configuration was found at this point.
Command (COM trace) #1
UNKNWOWNmalicious
ping -huhuhuhuhuhuhu
9f1ec7bfb4c984807779264c15e5befc › Root Entry › 䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
9f1ec7bfb4c984807779264c15e5befc › Root Entry › 䌋䄱䜵㬾䏤㽦䈫䈰㨉䠆
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account