Malicious
0d7f168c75444c86015a837e48d4f5c7
VBScript
MD5: 0d7f168c75444c86015a837e48d4f5c7
Size: 35.61 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 34.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
- MD5
- 0d7f168c75444c86015a837e48d4f5c7
- Verdict
- Malicious
- File type
- VBScript · 34.8 KB
Cite this report: https://app.malva.re/sha256/e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
35.61 KB · 35,605 B
First seen
2026-10-28 15:00 · 3 hours ago
Last seen
2026-10-28 15:00 · 3 hours ago
Last analysis
2026-10-28 15:00 · 3 hours ago
Hashes
MD5
0d7f168c75444c86015a837e48d4f5c7
Sha1
f7581a4d3449cbb90eb6aaafc98f6c8bd72f7a85
Sha256
e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
Sha384
040f06d22748a130bb5f26f685eb62b2baafe2daff0cefc928da325a3389455c1edc17f52994e3dbabe0b4653ece9687
Sha512
44605dc44edd31eb78ecf1649595eaf98043c42abd8589073c85d81d755999672c5318f77202687ef055414bae7edc715f9503cbe5f4c693b9516ec5f6b656a5
SSDeep
768:KcRQADlTbyhWk8SUOVU3iRiPAZdl7EUsTrx4J1FZMAq:LlvVkZUOVOPAl0xZAq
TLSH
F3F2555EDC318BF03A2A6656A44B74199A2CC3676838FD0938FFD18C7B765108FC17A9
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS0d7f168c75444c86015a837e48d4f5c7T1027 · T1059 · T1059.005
VBS0d7f168c75444c86015a837e48d4f5c7.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS0d7f168c75444c86015a837e48d4f5c7T1027 · T1059 · T1059.005
VBS0d7f168c75444c86015a837e48d4f5c7.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
0d7f168c75444c86015a837e48d4f5c7
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account