Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
MD5 fa9f80cdafefd10e85d4b2d9fbf29baa
Sha1 5dcb48c6dcd7c65dcdc25736d89a4f31d2be32ad
Sha256 b534ce19fb5227259252de3ad92a3b7834bd9ac768bcf9fbbda89d09770fc6d7
Sha384 dd04db21386c997050a9f4bd205dd8b93f0b248ce59a016d9c71d09456193fa65fb47baf303f4afa31fa1d6d8f13f235
Sha512 d9ec482a7e57ff3e8fff8a22a055b58aeddf09cfdf9af35fa0ef020f95131c34d416dc6b463293bf780a39e4e6affb0c04bb12b190cf5145f3c2b14124c1b0be
SSDeep 49152:IANNWGNzsQ6mgg63vSZZ5sVX/V/FpPLVbrcERaHePBQK0QDAEvAJ/W/iWSl:Z
TLSH DB96F65B93D403EE11B2B102E84E3969FA12C4BC6B3693252D58793D33B6634933E5F9
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #3 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #4 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
No malware configuration was found at this point.
URLs in VB Code - #1 URIsuspect
http:/huhuhuhuhuhuhuhuhuhuhu
fa9f80cdafefd10e85d4b2d9fbf29baa
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
fa9f80cdafefd10e85d4b2d9fbf29baa
URLs in VB Code - #3 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
fa9f80cdafefd10e85d4b2d9fbf29baa
URLs in VB Code - #4 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
fa9f80cdafefd10e85d4b2d9fbf29baa
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
You must be signed in to view YARA rules.
An error has occurred. This application may no longer respond until reloaded. Reload 🗙