Malicious
b1f343ccc638e1a05381b05a95f4e33f
VBScript
MD5: b1f343ccc638e1a05381b05a95f4e33f
Size: 4.76 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
4.76 MB · 4,762,808 B
First seen
2026-09-09 18:16 · one month ago
Last seen
2026-09-09 18:16 · one month ago
Last analysis
2026-09-09 18:16 · one month ago
Hashes
MD5
b1f343ccc638e1a05381b05a95f4e33f
Sha1
868d7d819d9750e2606b7f2685c9fb6e13952d61
Sha256
20b25f240fbdac8c212d7099657cc6520538f75a1cca5ea811ac6fda5dd1a591
Sha384
0ff16514220e8ff452798cdb070fd06d59a9823e0094dc90f861a62bb03920275b4d332d3cdc0709de073551a5f515fa
Sha512
3f078dc2a087ad43f844213da788f41876d1b595454cb4d0b9e7ecf480a250c94b36687bb5faa13cb1b8d7c8fa42d7ecb018279c80bbf3838b250bd392d7ee59
SSDeep
24576:A2QAy7nBFXehs2+8dkSCrcnhzsxL5xq5542e/WopmoQWRnmuQjuw/P29RKf0HB/t:A/TOdZsglqUWbQV/xKCMW4noaYA+fnC
TLSH
5C26B0515BC4AF64CFE4194BE4BC190A27F40BC9D80A55EEFB27B907ABEED04416E0C9
Detection
Symbol obfuscation
Very high
2 malicious · 2 files
VBSb1f343ccc638e1a05381b05a95f4e33fT1027 · T1059.005
VBSb1f343ccc638e1a05381b05a95f4e33f.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSb1f343ccc638e1a05381b05a95f4e33fT1027 · T1059.005
VBSb1f343ccc638e1a05381b05a95f4e33f.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Dropped path (COM trace) #1
PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
b1f343ccc638e1a05381b05a95f4e33f
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
b1f343ccc638e1a05381b05a95f4e33f
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account