Malicious VBScript analysis – 4fa80dd91b3a

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

PowerShell Script

Size

151 B · 151 B

First seen

2026-07-24 13:01 · 3 months ago

Last seen

2026-07-24 13:01 · 3 months ago

Last analysis

2026-07-25 07:47 · 3 months ago

Hashes

MD5 c82092b0bf5a3104694e19c6d2706d58 Sha1 d65ea975375ea045587dcc613f401d042ed44533 Sha256 4fa80dd91b3ad9eface9d55955ddae72ece88436520ebfa2a29814038f161586 Sha384 4f3d4590decfbd32370333d35b14b1e54bf8a1f48a3998b3cd19deda60669a17865a4a02212e5833b761d9d23186566f Sha512 5824c61ec1de932a4ffea9c0198bc27f0d24ab119fe6bd6baf6b395f26dcc3c6a0ae74c1a4696cfbe8fc4a53ce571ad5040c9ff42aee25355fe39447510943ab SSDeep 3:jeYcRm8nhr2SSJJFItGQqPJH0cVERvMXI3eEMlWAXkH6cxpv:jeUqhrK80QO0ceuEMWHJL

6 malicious · 6 files

VBSc82092b0bf5a3104694e19c6d2706d58

PS1[PowerShell Command]

PS1[Deobfuscated PS]

BINc82092b0bf5a3104694e19c6d2706d58.deobfuscated.vbs

SH[Command #0]

PS1[PowerShell Command]

PS1[Deobfuscated PS]

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1059.005>scr:bat>scr:ps1~T1027~T1059.001

Shape scr:vbs>scr:bat>scr:ps1

malicious 3 nodes

Path scr:vbs~T1059.005>scr:ps1~T1027~T1059.001

Shape scr:vbs>scr:ps1

malicious 2 nodes

URLs in VB Code - #1 URIsuspect

https:huhuhuhuhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

Invokhuhuhuhuhuhuhu

Deobfuscated PowerShell UNKNWOWNmalicious

"" irhuhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential