Malicious
Malicious

087981426061c62e5be314c9b761c729

VBScript
MD5: 087981426061c62e5be314c9b761c729
Size: 10.56 KB
text/vbscript

This sample is a 10.3 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1047, T1059, T1059.005 and T1105. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
9021d92a530bbb7b865d4842cc1b933e5b397d7a95c3f6a02db1c2512684222d
MD5
087981426061c62e5be314c9b761c729
Verdict
Malicious
File type
VBScript · 10.3 KB
MITRE ATT&CK
T1047T1059T1059.005T1105

Cite this report: https://app.malva.re/sha256/9021d92a530bbb7b865d4842cc1b933e5b397d7a95c3f6a02db1c2512684222d

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
10.56 KB · 10,559 B
First seen
2026-09-04 11:45 · one month ago
Last seen
2026-09-04 11:45 · one month ago
Last analysis
2026-09-04 11:45 · one month ago
Hashes
MD5 087981426061c62e5be314c9b761c729 Sha1 e0256efb9435145e8156343b2568fc447eac03c0 Sha256 9021d92a530bbb7b865d4842cc1b933e5b397d7a95c3f6a02db1c2512684222d Sha384 e55788d074d4d0b30052ce1c5853073a5de8877e9c577298580faa82d56e9546ced105e7001c7220ca122e10a2971e5c Sha512 29de17b95166c49577afc5f4510a8f34d180e022e4d54fa1f79429e53c7ae438fadeb9106dd926a413e00a5d7205703aa0b761883cb61d1e98aeae18e34c0c80 SSDeep 192:q2hHxzynyWd6QMDpBTFhltWSRto/JMTG3whNZo81QA:b9xmnp6QKBTFbtWhv3whNZoPA TLSH 9622E82BF84483B8489153E1E97F98C7ABE8D07E24555620B74DC54D2B7287C83E71FA
Detection
Symbol obfuscation
Low

1 malicious · 1 file
VBS087981426061c62e5be314c9b761c729
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1047~T1059~T1059.005~T1105
Shape scr:vbs
technique1 nodes

Command (COM trace) #1 UNKNWOWNmalicious
"C:\Ushuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 1 file
VBS087981426061c62e5be314c9b761c729
No malware configuration was found at this point.

Command (COM trace) #1 UNKNWOWNmalicious
"C:\Ushuhuhuhuhuhuhuhuhuhuhu
087981426061c62e5be314c9b761c729
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
087981426061c62e5be314c9b761c729
URLs in VB Code - #1 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
087981426061c62e5be314c9b761c729
URLs in VB Code - #2 URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
087981426061c62e5be314c9b761c729
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙