Suspect
0676711d9c2809e28ba6876775a0a9e7
VBScript
MD5: 0676711d9c2809e28ba6876775a0a9e7
Size: 641.03 KB
text/vbscript
This sample is a 626 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 7 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ae6e815981ca4ef79e01a1bbaf3927bfc557192c288cb31436ffb9366ef03077
- MD5
- 0676711d9c2809e28ba6876775a0a9e7
- Verdict
- Inconclusive
- File type
- VBScript · 626 KB
Cite this report: https://app.malva.re/sha256/ae6e815981ca4ef79e01a1bbaf3927bfc557192c288cb31436ffb9366ef03077
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
641.03 KB · 641,025 B
First seen
2026-10-16 17:45 · 16 days ago
Last seen
2026-10-16 17:45 · 16 days ago
Last analysis
2026-10-16 17:45 · 16 days ago
Hashes
MD5
0676711d9c2809e28ba6876775a0a9e7
Sha1
36be25e361e716269d48b1b8a4f930f44415b975
Sha256
ae6e815981ca4ef79e01a1bbaf3927bfc557192c288cb31436ffb9366ef03077
Sha384
b302937d1eb5a3a2d4b9bb01b225cded742188de800c8a4263578adeb1f620778421ac493a2f6088fb6fec76b3c1c6b8
Sha512
0e91a080c3fc2c06a0dba366bdb3f3d75279b41ecd5f65a7ec2cdbf352b742862f66675b0d8d19893b8cad2fd6f5c0ddee3115c80dac63bb9c0ff605c051cacc
SSDeep
12288:MZL8K7flZQP2MfAeWoqOKpqs3+Jt6eJcJYYoF5ZrH:6QKjlZQuaVWoqVpqsuJt6YcJYY05x
TLSH
DED47D4AA3A441F4D077C235CA838537E6B2BC056670862F13D74E5B6F273A15F2EB26
Detection
PeID
Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLL
8 files
VBS0676711d9c2809e28ba6876775a0a9e7
Structure
BINOverlay_d68442a8.bin
BINResources
BINRT_ICON
BINID:0001
BINID:1033
BINID:0002
BINID:1033
BINID:0003
BINID:1033
BINID:0004
BINID:1033
BINRT_RCDATA
BINID:0000
BINID:0
BINRT_GROUP_CURSOR4
BINID:007B
BINID:1033
STICH
beta
No STICH Path has been generated for this analysis yet.
2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.
bin
2| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_d68442a8.bin (1 bytes) |
| Info | PDB Path: t$di |
8 files
VBS0676711d9c2809e28ba6876775a0a9e7
Structure
BINOverlay_d68442a8.bin
BINResources
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account