Malicious
VBScript
MD5: f5bc414e0201d56967a4380524e6c6ec
Size: 790 B
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
790 B · 790 B
First seen
2026-06-19 14:46 · 4 months ago
Last seen
2026-06-19 14:46 · 4 months ago
Last analysis
2026-06-19 15:57 · 4 months ago
Hashes
MD5
f5bc414e0201d56967a4380524e6c6ec
Sha1
8e6915eecbe7c914625f8448bb8ba9548556307d
Sha256
21d540bd2d78b44c60915f81f42490dad986b557b287a2b81c38ce1f04c1afaf
Sha384
1b86732f1063d353763d9bdab193f5444af8e4f7ada60f07bf107855b3c9ca96399cc6b0d68a8e38dd6b6b6f41c10118
Sha512
c8f0b2a55850add59631b934dcda1ba833aea37c95ea4c008f2838758455fa98f86f2cdd999f61d6e69e9a54f7f80a0e7e7ddadfde1be5fd5ab8bdbadf6476f9
SSDeep
24:ynDmOMGv8l0Q0MGv5f80KhRzp5mH5uTLmOD5uwXecT0VZ/qajWf:ki48xH45sft56vODhiG
TLSH
E0019043F57B5A6FCD5572895120535CE9829FD2250396777A9D4C0C4703D1753874CB
5 malicious · 5 files
VBSf5bc414e0201d56967a4380524e6c6ecT1059.005
VBSf5bc414e0201d56967a4380524e6c6ec.deobfuscated.vbsT1059.005
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential5 malicious · 5 files
VBSf5bc414e0201d56967a4380524e6c6ecT1059.005
VBSf5bc414e0201d56967a4380524e6c6ec.deobfuscated.vbsT1059.005
SH[Command #0]
PS1[PowerShell Command]
PS1[Deobfuscated PS]
No malware configuration was found at this point.
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
f5bc414e0201d56967a4380524e6c6ec
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
f5bc414e0201d56967a4380524e6c6ec
Deobfuscated PowerShell
UNKNWOWNmalicious
Invokehuhuhuhuhuhuhuhuhuhuhu
f5bc414e0201d56967a4380524e6c6ec › f5bc414e0201d56967a4380524e6c6ec.deobfuscated.vbs › [Command #0] › [PowerShell Command]
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account