Malicious
a567fc58028e3157b8ac1d2b81334468
VBScript
MD5: a567fc58028e3157b8ac1d2b81334468
Size: 180 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
180 B · 180 B
First seen
2026-10-21 12:16 · 4 days ago
Last seen
2026-10-21 12:16 · 4 days ago
Last analysis
2026-10-21 12:16 · 4 days ago
Hashes
MD5
a567fc58028e3157b8ac1d2b81334468
Sha1
a006e70b1b4c51cac081d9d4ec72e756d9b8787c
Sha256
3085a18c35307576e6cf2d747aaa0a2d45933bd214bf911509cf54fb63dee6f1
Sha384
0e17e9c7da711f17c7e92b6bb6013722ad540cf63518a61e49cfc3213ac764386ad3b170598e16e1ed2123a03210f33c
Sha512
bcb42629a0fa0dcba948aa40c850d713eb28def0d975d4e228277e9d35b02522bd18d43d8259182e11d15e18fc727c5abe15a5284ae15b81e52a050f035f5977
SSDeep
3:jtSHFoFEm86oQ/FERMQsrtNsF22xA/dAcAAHVDzWfFEdyAAWGNKtkCsATW2URq1B:jtiGNht1xGYCxmDzWf2k0rTWIzrsy
2 malicious · 2 files
VBSa567fc58028e3157b8ac1d2b81334468T1027 · T1059 · T1059.005
VBSa567fc58028e3157b8ac1d2b81334468.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSa567fc58028e3157b8ac1d2b81334468T1027 · T1059 · T1059.005
VBSa567fc58028e3157b8ac1d2b81334468.deobfuscated.vbsT1059.005
| Config. Field | Value |
|---|---|
| URL (COM trace) #1 | https:huhuhuhuhuhuhuhuhuhuhu |
We extracted this malware's full configuration (C2, credentials, campaign IDs…).
Unlock with EssentialCommand (COM trace) #1
UNKNWOWNmalicious
msihuhuhuhu
a567fc58028e3157b8ac1d2b81334468
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
a567fc58028e3157b8ac1d2b81334468
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
a567fc58028e3157b8ac1d2b81334468
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account