Malicious
0a9046356daa166d1675ed34a68f1923
VBScript
MD5: 0a9046356daa166d1675ed34a68f1923
Size: 45.08 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9eaa0e8dd482d45142cfeadeb13e136ce6e72b780dcf169e09fe1f1ff353afb6
- MD5
- 0a9046356daa166d1675ed34a68f1923
- Verdict
- Malicious
- File type
- VBScript · 44 KB
Cite this report: https://app.malva.re/sha256/9eaa0e8dd482d45142cfeadeb13e136ce6e72b780dcf169e09fe1f1ff353afb6
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.08 KB · 45,081 B
First seen
2026-10-26 19:00 · 6 hours ago
Last seen
2026-10-26 19:00 · 6 hours ago
Last analysis
2026-10-26 19:00 · 6 hours ago
Hashes
MD5
0a9046356daa166d1675ed34a68f1923
Sha1
2107aced2809b8636b7ee2b6c735ad1575d8a8c1
Sha256
9eaa0e8dd482d45142cfeadeb13e136ce6e72b780dcf169e09fe1f1ff353afb6
Sha384
1ed22fa074032abeb0938d4249377a9978f4e97dd5141090a02cc421907a6caa950381e5d61fc51b2750e5d9042134e3
Sha512
8b2723297898f41174706734a27f550e55be57dcc86cf13b62308e2610057a78209ffe166c35d32265522a087ceaeda5878116435f6dd63a3b61d643767f2f9f
SSDeep
768:JVU7GyRoU/rbunUrvrbxjcyp4LbLVeniMeE8838EgDUz37ojpR:JVU7laUDynUrNL4n4n6E8jEgM37GR
TLSH
3E136DA0DA1522060D47266BDC4E55A2C6BC4269023344B0BEDDF78DA40BB6CB7FDE9D
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS0a9046356daa166d1675ed34a68f1923T1027 · T1059.005
VBS0a9046356daa166d1675ed34a68f1923.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS0a9046356daa166d1675ed34a68f1923T1027 · T1059.005
VBS0a9046356daa166d1675ed34a68f1923.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
0a9046356daa166d1675ed34a68f1923
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account