Malicious
c82092b0bf5a3104694e19c6d2706d58
VBScript
MD5: c82092b0bf5a3104694e19c6d2706d58
Size: 151 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
PowerShell Script
Size
151 B · 151 B
First seen
2026-07-24 13:01 · 3 months ago
Last seen
2026-07-24 13:01 · 3 months ago
Last analysis
2026-07-25 07:47 · 3 months ago
Hashes
MD5
c82092b0bf5a3104694e19c6d2706d58
Sha1
d65ea975375ea045587dcc613f401d042ed44533
Sha256
4fa80dd91b3ad9eface9d55955ddae72ece88436520ebfa2a29814038f161586
Sha384
4f3d4590decfbd32370333d35b14b1e54bf8a1f48a3998b3cd19deda60669a17865a4a02212e5833b761d9d23186566f
Sha512
5824c61ec1de932a4ffea9c0198bc27f0d24ab119fe6bd6baf6b395f26dcc3c6a0ae74c1a4696cfbe8fc4a53ce571ad5040c9ff42aee25355fe39447510943ab
SSDeep
3:jeYcRm8nhr2SSJJFItGQqPJH0cVERvMXI3eEMlWAXkH6cxpv:jeUqhrK80QO0ceuEMWHJL
6 malicious · 6 files
VBSc82092b0bf5a3104694e19c6d2706d58T1027 · T1059.001 · T1059.005
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BINc82092b0bf5a3104694e19c6d2706d58.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Path
scr:vbs~T1059.005>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:ps1
malicious
2 nodes
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
""
irhuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential6 malicious · 6 files
VBSc82092b0bf5a3104694e19c6d2706d58T1027 · T1059.001 · T1059.005
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BINc82092b0bf5a3104694e19c6d2706d58.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
c82092b0bf5a3104694e19c6d2706d58
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokhuhuhuhuhuhuhu
c82092b0bf5a3104694e19c6d2706d58 › c82092b0bf5a3104694e19c6d2706d58.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Deobfuscated PowerShell
UNKNWOWNmalicious
""
irhuhuhuhuhuhuhuhuhuhuhu
c82092b0bf5a3104694e19c6d2706d58 › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account