Malicious
b49d2ae7225ed676a1c92aec3e684822
VBScript
MD5: b49d2ae7225ed676a1c92aec3e684822
Size: 89 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
89 KB · 88,998 B
First seen
2026-09-09 18:16 · one month ago
Last seen
2026-09-09 18:16 · one month ago
Last analysis
2026-09-09 18:16 · one month ago
Hashes
MD5
b49d2ae7225ed676a1c92aec3e684822
Sha1
d634dbf456c717a7a6871d5de943bd3de6e5e092
Sha256
d64c8bc998a539b751a511c73e61ac773e0a48bc6a85735d0e511ecff2d19756
Sha384
a008825d1927a2081360e32e8fd811001c50dad14cdb234bd1a7ea345ed6cc340d5d3afe5320431238b18d623816cb52
Sha512
0416fc80fa965eeaa1e7d6926a212826526a29daec3ae7347efb19fb12c72893c260db19b38a5c1e9ca30690c5bac8c0773e901ee2b59aa3a5798866c21d5dc7
SSDeep
768:KZegHo9xQzbwxVSYLaUXYztbzdIqZOnUUxoLyM:KZlixQzbeloBTR
TLSH
05933F71050CD3979C8434546A8ECE74E678FE2E7FF41942572ABEA19C3E193FAE4281
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSb49d2ae7225ed676a1c92aec3e684822T1027 · T1059.005
VBSb49d2ae7225ed676a1c92aec3e684822.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSb49d2ae7225ed676a1c92aec3e684822T1027 · T1059.005
VBSb49d2ae7225ed676a1c92aec3e684822.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
b49d2ae7225ed676a1c92aec3e684822
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account