This sample is a 7.3 MB VBScript identified by Malva.RE as Stealer Crypter (stealer loader). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 0008c95fb43bd97dec04c408b61a66a38f59a7912e4d4a058647ef14407463f2
- MD5
- 0dccd2c6ca355c9f92d1626d8d046311
- Verdict
- Malicious
- File type
- VBScript · 7.3 MB
- Family
- Stealer Crypter
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/0008c95fb43bd97dec04c408b61a66a38f59a7912e4d4a058647ef14407463f2
Related Stealer Crypter samples
- b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583 2026-11-02
- 0086d2f0a06016855a3e583d436fe63e361c605b0a8780bd6e67a80564700e85 2026-10-31
- 5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803 2026-10-30
- 876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352 2026-10-30
- 9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e 2026-10-30
- 2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6 2026-10-30
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
pe:exe~T1027~T1027.001~T1055~T1140
pe:exe
| Name | Value |
|---|---|
| Attribution | |