Malicious
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
GZIP archive
4 malicious · 25 files
GZe0f019c63c2e6deed0abf6504d9c62e9
TARfile_0.bin
B64Base64-Block7
BIN15200441512 15200441516
BIN15200441512 15200441512
BIN15200441516 15200441516
BINpackage
JSrouter_init.js
PS1setup.mjs
JSONpackage.json
BINdist
VBStool.js
PS1[PowerShell Command]
BIN[Base64-Block]
URLs in VB Code - #1
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #5
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #6
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #7
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #8
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #9
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #10
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #11
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #12
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #13
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #14
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #15
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #16
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #17
URIsuspect
http:/huhuhuhuhuhuhu
URLs in VB Code - #18
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #19
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #20
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #21
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #22
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #23
URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #24
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #25
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #26
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #27
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #28
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #29
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #30
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #31
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #32
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #33
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #34
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #35
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential