Malicious
VBScript
MD5: c5baa116513ebc302cffc1e2ccf46ffd
Size: 1.25 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
1.25 KB · 1,254 B
First seen
2026-03-17 14:31 · 7 months ago
Last seen
2026-03-17 14:31 · 7 months ago
Last analysis
2026-03-17 14:58 · 7 months ago
Hashes
MD5
c5baa116513ebc302cffc1e2ccf46ffd
Sha1
b0a203015708ca5bb442a8224379b7348b331c11
Sha256
4faad793253d32d0c6c7a5d0ec7526f546c5e980599b5e635ca40153fd782643
Sha384
295ab9fdc44fc06c17abd5ad227b2a0befd79149e574368fb2ea22520cc1a99cf7708da02b12824ff83fe3cc0a12b25f
Sha512
bb870387f8f01173a504b5dcb930643b3deeffe5b63628fa9fc13dbc8734b7a1c2326a39f562880d746b089a3ab1693f5511693dea893c1bb095ebfabb3c8011
SSDeep
24:1zdzPK2hNZUlNeltZ6BI56w1AZUMaFSOF:1zlXNZUlclD6BIbAZM
TLSH
3D219C8F6206B2549EB2521586C73D3CEA826F328E9070B45FE8854CCD21779B3AD497
6 malicious · 6 files
VBSc5baa116513ebc302cffc1e2ccf46ffd
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BINc5baa116513ebc302cffc1e2ccf46ffd.deobfuscated.vbs
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
"Invokhuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
""
Inhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 6 files
VBSc5baa116513ebc302cffc1e2ccf46ffd
PS1[PowerShell Command]
PS1[Deobfuscated PS]
BINc5baa116513ebc302cffc1e2ccf46ffd.deobfuscated.vbs
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
c5baa116513ebc302cffc1e2ccf46ffd
Deobfuscated PowerShell
UNKNWOWNmalicious
"Invokhuhuhuhuhuhuhuhuhuhuhu
c5baa116513ebc302cffc1e2ccf46ffd › c5baa116513ebc302cffc1e2ccf46ffd.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
""
Inhuhuhuhuhuhuhuhuhuhuhu
c5baa116513ebc302cffc1e2ccf46ffd › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account