Malicious
cc81d851b4b82e2ac4b6d465dd319b9c
VBScript
MD5: cc81d851b4b82e2ac4b6d465dd319b9c
Size: 1.09 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.09 MB · 1,085,150 B
First seen
2026-07-16 07:31 · 3 months ago
Last seen
2026-07-16 07:31 · 3 months ago
Last analysis
2026-07-17 07:34 · 3 months ago
Hashes
MD5
cc81d851b4b82e2ac4b6d465dd319b9c
Sha1
4de917f9ce24fd5e5b1865ce0da23813c76bbf2b
Sha256
414adc9d44514fb2aa210571d1330c64ae2ba691c796859f21ba1b6aef2a4e4c
Sha384
2ffd8d8810f29a8816d9dc01afd70cf86e46e1b4b5360bc01f7b887b2e8bceca64fca81c335868e09dde5529ad6b53b5
Sha512
5e9b23e9d9d7ec691fdf009c423fb0f9c3d55155c0a6bc5ae87a5e8c0be9a114f73f85ba445e987f3bd52aa793836582a4efba0341af4da0a3b0421028b7167d
SSDeep
192:jVdmdWpAgVdGs2ej64s0dndbdudZdCz1dDdCkG+bhFMaRzd8dKRWLXdn:RQeNW4P9Zcbwz1lwgtT2kIR
TLSH
FF354209AD56BDBCEBFA29E5FCC96DECD894E60C10F83D5E61973B41503219083A067B
5 malicious · 5 files
VBScc81d851b4b82e2ac4b6d465dd319b9cT1027 · T1059.001 · T1059.005
BINcc81d851b4b82e2ac4b6d465dd319b9c.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBScc81d851b4b82e2ac4b6d465dd319b9cT1027 · T1059.001 · T1059.005
BINcc81d851b4b82e2ac4b6d465dd319b9c.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
cc81d851b4b82e2ac4b6d465dd319b9c › cc81d851b4b82e2ac4b6d465dd319b9c.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
cc81d851b4b82e2ac4b6d465dd319b9c › cc81d851b4b82e2ac4b6d465dd319b9c.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account