Local reference
Suspicious dependency
Inferred
Mal-ecule
H₂(OsPo)Md
Well-known
component severity, 100% confident.
malware/dropper
Nemucod WSH fragment Shell
Objectives
component severity, 82% confident.
discovery/system/ics-environment
Regex component marker
component severity, 85% confident.
lateral-movement/brute-force
Service account tomcat
Micro-behaviors
notable severity, 85% confident.
os/com
Shell.Application ProgID string
notable severity, 88% confident.
process/create/macro
Shell or CreateObject invocation
baseline severity, 88% confident.
fs/file
VB6 binary file get
component severity, 72% confident.
data/text/llm
LLM instruction context
component severity, 84% confident.
ui
ANSI terminal erase operation
Metadata
notable severity, 90% confident.
encoded-payload
Encoded payload detected: base64
component severity, 90% confident.
file/text
File has 30 or more lines
Identity
| SHA-256 | 72da4b028cc495fd150287a4caadac7a1a81bae975010c331b346babd4f75208 |
|---|---|
| Filename | 72da4b028cc495fd150287a4caadac7a1a81bae975010c331b346babd4f75208.vbs |
Origin
| Source | harvest |
|---|
Timeline
| First seen | 17 May 2026 15:12 UTC |
|---|---|
| First analyzed | 30 May 2026 23:47 UTC |
| Last analyzed | 30 May 2026 23:47 UTC |
| Last updated | 30 May 2026 23:47 UTC |
Labeling
| Label | bad |
|---|---|
| Label source | harvest |
| Traits version | 52045 |
Not seeing what you expected? Let us know