{"id":"57c90f8b67dbaf7c6c6accbfca3b6fb6","title":"VBS Hybrid Dropper — VBS Hybrid Dropper · 下载器/投放器 · VBS","md5":"57c90f8b67dbaf7c6c6accbfca3b6fb6","sha256":"63683003de326f5a04957518c0d4a34caa10c582769ada0defa2a2e626a90fac","family":"VBS Hybrid Dropper","apt":null,"verdict":null,"sample_type":"下载器/投放器","lang":"N","file_format":"VBS","compiler":"N/A (Script)","published_at":"2026-08-09T16:00:00.000Z","summary":"VBS Hybrid Dropper — VBScript/JavaScript 混合投放器，使用 ActiveXObject 和 WScript.Shell 执行系统命令，包含丹麦语注释混淆。该家族共发现 2 个变种，代表样本 SHA256: e9855bdf3f45a2ed...。脚本使用多种混淆技术隐藏恶意逻辑，通过 WScript/CScript 宿主执行，最终投放远程载荷或执行系统命令。","url":"https://zseceye.com/report/57c90f8b67dbaf7c6c6accbfca3b6fb6","json_url":"https://zseceye.com/report/57c90f8b67dbaf7c6c6accbfca3b6fb6.json","html_url":"https://zseceye.com/report/57c90f8b67dbaf7c6c6accbfca3b6fb6","hash_urls":{"md5":"https://zseceye.com/hash/57c90f8b67dbaf7c6c6accbfca3b6fb6","sha256":"https://zseceye.com/hash/63683003de326f5a04957518c0d4a34caa10c582769ada0defa2a2e626a90fac"},"search_urls":{"md5":"https://zseceye.com/?q=57c90f8b67dbaf7c6c6accbfca3b6fb6","sha256":"https://zseceye.com/?q=63683003de326f5a04957518c0d4a34caa10c582769ada0defa2a2e626a90fac"},"sample_download_url":"https://zseceye.com/report/57c90f8b67dbaf7c6c6accbfca3b6fb6/sample","sample_filename":"e9855bdf.zip","iocs":[],"ips":[]}