Malicious
Malicious
Summary by MalvaGPT
Characteristics
Hash
 Hash Value
MD5
fa9f80cdafefd10e85d4b2d9fbf29baa
Sha1
5dcb48c6dcd7c65dcdc25736d89a4f31d2be32ad
Sha256
b534ce19fb5227259252de3ad92a3b7834bd9ac768bcf9fbbda89d09770fc6d7
Sha384
dd04db21386c997050a9f4bd205dd8b93f0b248ce59a016d9c71d09456193fa65fb47baf303f4afa31fa1d6d8f13f235
Sha512
d9ec482a7e57ff3e8fff8a22a055b58aeddf09cfdf9af35fa0ef020f95131c34d416dc6b463293bf780a39e4e6affb0c04bb12b190cf5145f3c2b14124c1b0be
SSDeep
49152:IANNWGNzsQ6mgg63vSZZ5sVX/V/FpPLVbrcERaHePBQK0QDAEvAJ/W/iWSl:Z
TLSH
DB96F65B93D403EE11B2B102E84E3969FA12C4BC6B3693252D58793D33B6634933E5F9
File Structure
fa9f80cdafefd10e85d4b2d9fbf29baa
Malicious
fa9f80cdafefd10e85d4b2d9fbf29baa.deobfuscated.vbs
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[PowerShell Command]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
[Deobfuscated PS]
Malicious
Artefacts
Name
 Value
URLs in VB Code - #1

http://ip-api.com/csv/?fields=countryCode
URLs in VB Code - #2

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #3

https://ibcosociety.com.sa/assets/fonts/d.php?f=katyusha2
URLs in VB Code - #4

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #1

https://www.dropbox.com/scl/fi/wjjqoeisjztla2mrbb79g/gmail2.7z?rlkey=wqkboglz4szexsjoncs9du291&st=6w6awlra&dl=1
URLs in VB Code - #2

https://www.7-zip.org/a/7zr.exe
URLs in VB Code - #3

https://ibcosociety.com.sa/assets/fonts/d.php?f=katyusha2
URLs in VB Code - #4

http://ip-api.com/csv/?fields=countryCode
fa9f80cdafefd10e85d4b2d9fbf29baa (8.79 MB)
An error has occurred. This application may no longer respond until reloaded. Reload 🗙