Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
4 IOCs

The Art of Evasion: How Attackers Use VBScript and PowerShell in the Obfuscation Game

Malware Analysis Space
Malware Analysis Space
Published March 20, 2025Original Report

Excerpt

  Summary   As we know, using obfuscated VBScript to execute obfuscated PowerShell  is a common technique in malware to evade detection and complicate analysis. This approach leverages the strengths of both scripting languages while making it harder for security tools and analysts to understand the malicious intent.   Recently I came across a malware that is very well-designed for these obfuscation techniques to use, which is so interesting and attracted…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREhttps://aghayezayeat.…185.159.153.133CAPABILITYunknownVICTIMunknown
Adversary
Infrastructure(2)
Capability
Victim

Indicators of Compromise

Open the mindmap →

4 indicators

TypeIndicatorConfidenceScoreFirst Seen
URLhttps://aghayezayeat.ir/529/eiRBgmsetYWnjJJIug45.binHighScore 58/100First seen
IP185.159.153.133HighScore 58/100First seen
MD50e513e80fc18e3db4f0eb6ecb558534bMediumScore 53/100First seen
SHA2567444d08579781b3d7b233e9fd3e7f9b31a85837c29adf2f4ae7965a628078639MediumScore 53/100First seen

IOC Relationship Graph

Building graph…