Malicious
VBScript
MD5: b9ad86637f279789604228df68d6b1d5
Size: 1.89 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.89 MB · 1,885,391 B
First seen
2026-06-19 02:16 · 4 months ago
Last seen
2026-06-19 02:16 · 4 months ago
Last analysis
2026-06-19 15:54 · 4 months ago
Hashes
MD5
b9ad86637f279789604228df68d6b1d5
Sha1
2e78e7c51572a8d57b3987de9b3c186212337445
Sha256
61c5833831b300b97a6bbacf5b8dcdeca31f7a121dd3d4d2822e3a81b5ac63a8
Sha384
ece20a36a53f71f2cb777c5ea13e91389f47025d94d18fd3fac74103dc869897c841b4685b9980d36f9340b8dc26672c
Sha512
bcb2a349ccf0c27d296d5b88df296f2c8c047263d988f2d30eef54ede45425bab38137579427e13391ca4381cd1c2a5b60c9d12fc532c45d512435fba5023f63
SSDeep
12288:ELLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLp:w
TLSH
BD958F00DD3896E628A09795C8928728ED3632C39CE5F5447DEC7F61C0EC9E5DE972A2
15 malicious · 15 files
VBSb9ad86637f279789604228df68d6b1d5T1059.005
PS1[PowerShell Command]T1059.005
VBS[PowerShell Command].deobfuscated.vbsT1059.005
PS1[Deobfuscated PS]
BINb9ad86637f279789604228df68d6b1d5.deobfuscated.vbs
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
SH[Command #1]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
PS1[Base64-Block]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
Deobfuscated PowerShell
UNKNWOWNmalicious
Copy-Ihuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential