Malicious
f68cc2f19e6e207ffacb6a3b92b5c9e5
VBScript
MD5: f68cc2f19e6e207ffacb6a3b92b5c9e5
Size: 16.78 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
16.78 MB · 16,779,853 B
First seen
2026-09-10 00:30 · one month ago
Last seen
2026-09-10 00:30 · one month ago
Last analysis
2026-09-10 00:30 · one month ago
Hashes
MD5
f68cc2f19e6e207ffacb6a3b92b5c9e5
Sha1
863573468cd5d8ceada119de0306d2b036222dd4
Sha256
3199b8a0398994b0126a1e642618b5ba903acaeec64afd48f59a7bffd9045971
Sha384
e39324e4adc0841e0de7e5969f4cc3adc2e791ae23faffad5add477ee9aeea8b7ebb4782cd97af12fbe3fe0ea24af858
Sha512
9f869d651f9d0306ab735aefb7765b31ec75ddb02e08fc8862a5d6d3474aeb754ee64a48fb5c5e68067425ece6920e29d4a628c821a749ed7f7934f85fb91271
SSDeep
49152:05bMGDnXusi7iypeP1Vodu2nmg7/2cauYWLWKUM7UlSsmEdHOav3Zu/JFFCUqeNk:M
TLSH
DAF689331AD47D45E71F202BF8E92A011EE13AF3011BFDB57B81759A051AD708BD26AB
Detection
Symbol obfuscation
Very low
2 malicious · 7 files
VBSf68cc2f19e6e207ffacb6a3b92b5c9e5T1027 · T1059 · T1059.005
BIN[Base64-Block @0x0025091A]
VBSf68cc2f19e6e207ffacb6a3b92b5c9e5.deobfuscated.vbsT1059.005
SH[Command #0]
BIN[Base64-Block]
SH[Command #2]
BIN[Base64-Block]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005>scr:bat
Shape
scr:vbs>scr:bat
malicious
2 nodes
Command (COM trace) #1
UNKNWOWNmalicious
wschuhuhuhu
Trace COM ordonnée
UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 7 files
VBSf68cc2f19e6e207ffacb6a3b92b5c9e5T1027 · T1059 · T1059.005
BIN[Base64-Block @0x0025091A]
VBSf68cc2f19e6e207ffacb6a3b92b5c9e5.deobfuscated.vbsT1059.005
SH[Command #0]
SH[Command #2]
No malware configuration was found at this point.
Command (COM trace) #1
UNKNWOWNmalicious
wschuhuhuhu
f68cc2f19e6e207ffacb6a3b92b5c9e5
Trace COM ordonnée
UNKNWOWNmalicious
line 4huhuhuhuhuhuhuhuhuhuhu
f68cc2f19e6e207ffacb6a3b92b5c9e5
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account