Hostile 100% Download

b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30.rar

Obfuscated VBS runner with hidden execution

WSH runs hidden windowWSH obfuscated runner bloat
SHA-256b76d5451dd01a49fcbfb64219dfe592d392783ddb4efeb1b2a5f5dcc36ef5d30

Evidence

PowerShell or VBScript line bloat line 0
0'************************************************************
Arabic script detection (Arabic/Urdu) line 316
316****** ' ‣ موارد البوابة العربية |
Japanese script detection (Hiragana/Katakana) line 475
475nanya Patel — エラーメッセージテンプレ�
Devanagari script detection (Hindi/Marathi) line 906
906nction ' │ समीक्षा पूर्ण | 客户门户简体中文资源 ' Kang Min-ji — अद्य
WSH runs hidden window line 2959
29594425) v7014.Run v4425, 0, False End Sub ' » سلاسل و�

No evidence locations were recorded for this file. Raw result

Keyboard shortcuts on this page: j for the next sample, k for the previous one, x to go back to the feed, d to download the original bytes, r to re-queue the sample for analysis.