Malicious
VBScript
MD5: d9da897141471576d80cb358e96729d6
Size: 1.33 MB
text/vbscript
General
Structural Analysis
Config.0
Yara Rules30
Sync
Community
Summary by MalvaGPT
Characteristics
|
Hash | Hash Value |
|---|---|
| MD5 | d9da897141471576d80cb358e96729d6
|
| Sha1 | d3ea311a7661027b3a77f7b8d7e313ae82f42628
|
| Sha256 | 391edbfdd1f3011d914612342f927b20b6268d4e9effbd7e7b90f5428d827c16
|
| Sha384 | 1291858c44cd93af91b8c28998b4373218b8dab97041629d20ed71198918934c6021ce0d1c683c0e892919d3b037f7b4
|
| Sha512 | 9688796241d2239779b58f5360eb61ecb57b17b986b90e3a12ff9585231defca6028f9e573a0ffdcdc593d4f96e2c818e9361b7d127fbbd1fd5a0728a5316fe0
|
| SSDeep | 96:bAu7dt7TJjXA1dqg10AqVqjPw5qnNGGlq5jPw1qH1ATAe5qnk7TJjXA1dqDPqS1Q:JuiOKuqihKDUq
|
| TLSH | 8655A4F0E23152177A2C166DF8DDE895509BBF264A78088B9FDDC51651CE8E8B8B0F4C
|
File Structure
d9da897141471576d80cb358e96729d6
Malicious
d9da897141471576d80cb358e96729d6.deobfuscated.vbs
Malicious
Artefacts
|
Name | Value |
|---|---|
| Deobfuscated PowerShell | powershuhuhuhuhuhuhuhuhuhuhu
|
| Deobfuscated PowerShell | Invokehuhuhuhuhuhuhuhuhuhuhu
|
| Deobfuscated PowerShell | Invokehuhuhuhuhuhuhuhuhuhuhu
|
| Deobfuscated PowerShell | powershuhuhuhuhuhuhuhuhuhuhu
|
Full artefact values (URLs, paths, registry keys…) are available with Essential.
Unlock with Essential
d9da897141471576d80cb358e96729d6 (1.33 MB)
File Structure
d9da897141471576d80cb358e96729d6
Malicious
d9da897141471576d80cb358e96729d6.deobfuscated.vbs
Malicious
Characteristics
No malware configuration were found at this point.
Artefacts
|
Name | Value | Location |
|---|---|---|
| Deobfuscated PowerShell | powershuhuhuhuhuhuhuhuhuhuhu
Malicious |
d9da897141471576d80cb358e96729d6 > d9da897141471576d80cb358e96729d6.deobfuscated.vbs > [Command #0] |
| Deobfuscated PowerShell | Invokehuhuhuhuhuhuhuhuhuhuhu
Malicious |
d9da897141471576d80cb358e96729d6 > d9da897141471576d80cb358e96729d6.deobfuscated.vbs > [Command #0] > [PowerShell Command] |
| Deobfuscated PowerShell | Invokehuhuhuhuhuhuhuhuhuhuhu
Malicious |
d9da897141471576d80cb358e96729d6 > d9da897141471576d80cb358e96729d6.deobfuscated.vbs > [Command #0] > [PowerShell Command] > [Deobfuscated PS] |
| Deobfuscated PowerShell | powershuhuhuhuhuhuhuhuhuhuhu
Malicious |
d9da897141471576d80cb358e96729d6 > d9da897141471576d80cb358e96729d6.deobfuscated.vbs > [Command #0] > [Deobfuscated PS] |
Full artefact values (URLs, paths, registry keys…) are available with Essential.
Unlock with Essential
You must be signed in to post a comment.
You need a premium account to access this feature.
You must be signed in to post a comment.