Malicious
Malicious

cad9939b6a478e8f7d1f829e1642c817

VBScript
|
MD5: cad9939b6a478e8f7d1f829e1642c817
|
Size: 704.86 KB
|
text/vbscript

Infection Chain
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
cad9939b6a478e8f7d1f829e1642c817
Sha1
2c6da490f5408b30adc91b9e2015536c8d595476
Sha256
dcc5e50b7931f67538ba5a423ec6366db60c0ef297f7d93fd5bbeeb0542cc87c
Sha384
d44820e984893cf766410d3abae281e9d9c753f12d4b0a83f34fcd5c1d1e80058c5052cf0737dd4252f42908eef0db53
Sha512
e29a2b3f131fc9e803fa92c76f9a9566bd509753a3449fe021204fb336f809ce80dfcf0306a2040665278033fc2e8928731a977d7ec6aac86754efa7b6706433
SSDeep
6144:kt3kM9YbI1Gabm48QqJ+n6/v1MHGldkQjg2zIt3kM9YbI1Gabm48QqJ+n6/v1MH0:43kGYFt48BtLleu43kGYFt48BtLleU
TLSH
5DE4BCCEBE191FB0989231B81A29F0A37F74D7C1AF125FBE5C1FC28B55928D5920161B
File Structure
cad9939b6a478e8f7d1f829e1642c817
Malicious
cad9939b6a478e8f7d1f829e1642c817.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

https://www.javascriptfreecode.com
URLs in VB Code - #2

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
URLs in VB Code - #3

https://fonts.googleapis.com
URLs in VB Code - #4

https://fonts.gstatic.com
URLs in VB Code - #5

https://fonts.googleapis.com/css2?family=Inter:wght@400
URLs in VB Code - #6

http://www.javascriptfreecode.com
URLs in VB Code - #7

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css
URLs in VB Code - #8

http://www.javascriptfreecode.com/files/video_player_manipulation_with_intersecting_observer/Water
cad9939b6a478e8f7d1f829e1642c817 (704.86 KB)
File Structure
cad9939b6a478e8f7d1f829e1642c817
Malicious
cad9939b6a478e8f7d1f829e1642c817.deobfuscated.vbs
Malicious
[Command #0]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Base64-Block]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[PowerShell Command]
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
Name
 Value Location
URLs in VB Code - #1

https://www.javascriptfreecode.com

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #2

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #3

https://fonts.googleapis.com

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #4

https://fonts.gstatic.com

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #5

https://fonts.googleapis.com/css2?family=Inter:wght@400

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #6

http://www.javascriptfreecode.com

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #7

https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.css

cad9939b6a478e8f7d1f829e1642c817
URLs in VB Code - #8

http://www.javascriptfreecode.com/files/video_player_manipulation_with_intersecting_observer/Water

cad9939b6a478e8f7d1f829e1642c817
You must be signed in to post a comment.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙