{"id":"a335e9f924a2123af15fe5f311d96a47","title":"VBScript Dropper — VBScript Dropper · 下载器/投放器 · VBS","md5":"a335e9f924a2123af15fe5f311d96a47","sha256":"5b72a51fbec3468b266222c1f7c644ec53249088135aa80ea14569622df8fad8","family":"VBScript Dropper","apt":null,"verdict":null,"sample_type":"下载器/投放器","lang":"N","file_format":"VBS","compiler":"N/A (Script)","published_at":"2026-08-09T16:00:00.000Z","summary":"VBScript Dropper — VBScript 投放器，使用变量名混淆和垃圾代码填充，通过 CreateObject 执行系统操作。该家族共发现 2 个变种，代表样本 SHA256: c449d4a7e46b0848...。脚本使用多种混淆技术隐藏恶意逻辑，通过 WScript/CScript 宿主执行，最终投放远程载荷或执行系统命令。","url":"https://zseceye.com/report/a335e9f924a2123af15fe5f311d96a47","json_url":"https://zseceye.com/report/a335e9f924a2123af15fe5f311d96a47.json","html_url":"https://zseceye.com/report/a335e9f924a2123af15fe5f311d96a47","hash_urls":{"md5":"https://zseceye.com/hash/a335e9f924a2123af15fe5f311d96a47","sha256":"https://zseceye.com/hash/5b72a51fbec3468b266222c1f7c644ec53249088135aa80ea14569622df8fad8"},"search_urls":{"md5":"https://zseceye.com/?q=a335e9f924a2123af15fe5f311d96a47","sha256":"https://zseceye.com/?q=5b72a51fbec3468b266222c1f7c644ec53249088135aa80ea14569622df8fad8"},"sample_download_url":"https://zseceye.com/report/a335e9f924a2123af15fe5f311d96a47/sample","sample_filename":"c449d4a7.zip","iocs":[],"ips":[]}