Malicious
ed85049025cfc4b64d2fe8edbb0d138c
VBScript
MD5: ed85049025cfc4b64d2fe8edbb0d138c
Size: 61.64 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
61.64 KB · 61,637 B
First seen
2026-09-07 01:45 · one month ago
Last seen
2026-09-07 01:45 · one month ago
Last analysis
2026-09-07 01:45 · one month ago
Hashes
MD5
ed85049025cfc4b64d2fe8edbb0d138c
Sha1
91c9f305bdead634287833286ae00c6cbc0d2308
Sha256
f79139304d7e7197ffe1bab0441eccdfaaa2bd0d745f4c4ea810ec7c92cb2e76
Sha384
9487bb37484940667c41cbc7247136d49dd551ef474e783df1913607154cfc2ce342947f4c134558eadc41e0ae182d87
Sha512
12352bd90dc2112217c43e2ccbc34b33a5d652de2a6a11457dad5fdb1ae120d909c3b56ba299ae1a21e9a637ec91c5173054c0d050f3de1e3f3096def0e96541
SSDeep
1536:W7KGo9Kji81ob4ZymuN86Y3L6Au1qkhI4wwD2QxP:AI9s/oMy/SN3L3u1qkGRwDtxP
TLSH
55536D20EE6401190E5B27A9DC147E52C5FEA2DA561714E1FFEAB30C440B59CB3BE22E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSed85049025cfc4b64d2fe8edbb0d138cT1027 · T1059.005
VBSed85049025cfc4b64d2fe8edbb0d138c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSed85049025cfc4b64d2fe8edbb0d138cT1027 · T1059.005
VBSed85049025cfc4b64d2fe8edbb0d138c.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
ed85049025cfc4b64d2fe8edbb0d138c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account