Malicious
Malicious

a6c57fa765d5694e5405e34496fedfcf

Share on LinkedIn Add to favorites
Re-Scan
Delete
VBScript
MD5: a6c57fa765d5694e5405e34496fedfcf
Size: 1.41 MB
text/vbscript
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
a6c57fa765d5694e5405e34496fedfcf
Sha1
875c2e7da5ffef741949b31cbbe30eadd9394528
Sha256
58007ce4dc359f449915af0914744f7291219375a8e28f74e12723311423543b
Sha384
3af1abe1b22b5ff9757ebbb328c53b64a66cc1a6fb410bff6e896736d9e2761fd0461035c0185b7eb2a55e7e0357cab8
Sha512
a79cc46b11748c3ca6102feba1247d75ca712afdb5ae35760189099b2b3789741aeb419fb10e0db07a70144156b6de8da2ae9f6e76db76f228a5341b81d741ec
SSDeep
96:oEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEt:sQ5PfShA639Z6Zog++5mmajeKn
TLSH
9165926CF31282D18AD80F0949BF56AED43D07EB2E2593526F7479B0172968CDD81E8F
File Structure
E-dekon_pdf.vbs
Malicious
E-dekon_pdf.vbs.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:duplicidentata"
Deobfuscated PowerShell

Invoke-Expression $env:duplicidentata
Deobfuscated PowerShell

Invoke-Expression $env:duplicidentata
Deobfuscated PowerShell

powershell.exe -NoProfile -Command "Invoke-Expression $env:duplicidentata"
a6c57fa765d5694e5405e34496fedfcf (1.41 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙