Malicious
VBScript
MD5: 0d7f168c75444c86015a837e48d4f5c7
Size: 35.61 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 34.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
- MD5
- 0d7f168c75444c86015a837e48d4f5c7
- Verdict
- Malicious
- File type
- VBScript · 34.8 KB
Cite this report: https://app.malva.re/sha256/e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
35.61 KB · 35,605 B
First seen
2026-10-28 15:00 · 3 hours ago
Last seen
2026-10-28 15:00 · 3 hours ago
Last analysis
2026-10-28 15:00 · 3 hours ago
Hashes
MD5
0d7f168c75444c86015a837e48d4f5c7
Sha1
f7581a4d3449cbb90eb6aaafc98f6c8bd72f7a85
Sha256
e4bcaa042fd2fdee097a8bfef573e94ce955144c8a52970383f5381b4821efbe
Sha384
040f06d22748a130bb5f26f685eb62b2baafe2daff0cefc928da325a3389455c1edc17f52994e3dbabe0b4653ece9687
Sha512
44605dc44edd31eb78ecf1649595eaf98043c42abd8589073c85d81d755999672c5318f77202687ef055414bae7edc715f9503cbe5f4c693b9516ec5f6b656a5
SSDeep
768:KcRQADlTbyhWk8SUOVU3iRiPAZdl7EUsTrx4J1FZMAq:LlvVkZUOVOPAl0xZAq
TLSH
F3F2555EDC318BF03A2A6656A44B74199A2CC3676838FD0938FFD18C7B765108FC17A9
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS0d7f168c75444c86015a837e48d4f5c7T1027 · T1059 · T1059.005
VBS0d7f168c75444c86015a837e48d4f5c7.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential