Malicious
VBScript
MD5: a70f6a381ca6407f1539bdfd6ae8ec38
Size: 791 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
791 B · 791 B
Hashes
MD5
a70f6a381ca6407f1539bdfd6ae8ec38
Sha1
a523085c74e35e8df5ef7f18eaefbb6952bb8b66
Sha256
b57c3186303f4a56ac70699bdef1aede047db5a118370f93df0171d9d2add0d6
Sha384
76b69647f0c878f2c2b8a0f6efba321310d531acf3be406e87d59fe86d07cc3f9fca99d49e999c8355d444a0c32d24b4
Sha512
0fd15830d6ad6190527ba3856c42328d38eb2e8d65143839b9c6f23e19530d271768c9e70146b08186d32790b7f7febc59d00514d94ad30c1c79f92047d9846b
SSDeep
24:ynDmOMGvol0Q0MGvkf80KhRzp5mH5uTLmOD5uwXecT0VZ/qajWf:ki4oxH4ksft56vODhiG
TLSH
2B01D043F63B9A6FCD5176C99120535CEA828F9125038677BA9D4C0C4313D1743474CB
5 malicious · 5 files
VBSa70f6a381ca6407f1539bdfd6ae8ec38T1059.005
VBSa70f6a381ca6407f1539bdfd6ae8ec38.deobfuscated.vbsT1059.005
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBSa70f6a381ca6407f1539bdfd6ae8ec38T1059.005
VBSa70f6a381ca6407f1539bdfd6ae8ec38.deobfuscated.vbsT1059.005
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
a70f6a381ca6407f1539bdfd6ae8ec38
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
a70f6a381ca6407f1539bdfd6ae8ec38
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
a70f6a381ca6407f1539bdfd6ae8ec38 › a70f6a381ca6407f1539bdfd6ae8ec38.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account