Malicious
eb595d742c987e04d7cff1b7ccb35a0a
VBScript
MD5: eb595d742c987e04d7cff1b7ccb35a0a
Size: 1.3 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
1.3 MB · 1,303,803 B
First seen
2026-07-16 07:31 · 3 months ago
Last seen
2026-07-16 07:31 · 3 months ago
Last analysis
2026-07-17 17:38 · 3 months ago
Hashes
MD5
eb595d742c987e04d7cff1b7ccb35a0a
Sha1
e1cbad1a5145478ea318bcf35dd93e0a6d5b6bb8
Sha256
fa3a3858721b0b16d3d62bb372bc110107eb6b58ed1250910dace89bf8c56822
Sha384
b16fcc3a97c75325adf68cdf41570061d9d1ffcd82494d66de288eadef88afacbd2809fcfad596d11679de3606585e01
Sha512
0e0e1d937826d7cf9553e66d9c56ec76dbace8a7595a0bce71e2e7e16386369b3b95ad047868cf714c035b46351562af582a2c6bd147edafe3486a01ae508a15
SSDeep
384:P3PB57ZKX/YqX+KY3YJF6rY9vkkHYrJF6XYdXK5K8rY9uB57ZKX/YpFYgX8Kvkks:nhEs4zi
TLSH
EB55823011B0BE10648BF6347629DC5ACD6517A0799ECBB53299F90C8F97BDAF399C02
5 malicious · 5 files
VBSeb595d742c987e04d7cff1b7ccb35a0aT1027 · T1059.001 · T1059.005
BINeb595d742c987e04d7cff1b7ccb35a0a.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1059.005>scr:bat~T1027~T1059.001>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBSeb595d742c987e04d7cff1b7ccb35a0aT1027 · T1059.001 · T1059.005
BINeb595d742c987e04d7cff1b7ccb35a0a.deobfuscated.vbs
SH[Command #0] T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]T1059.001
No malware configuration was found at this point.
Deobfuscated PowerShell
UNKNWOWNmalicious
powershuhuhuhuhuhuhuhuhuhuhu
eb595d742c987e04d7cff1b7ccb35a0a › eb595d742c987e04d7cff1b7ccb35a0a.deobfuscated.vbs › [Command #0]
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
eb595d742c987e04d7cff1b7ccb35a0a › eb595d742c987e04d7cff1b7ccb35a0a.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account