Malicious
Malicious

12adc60e8dfdcfded66a8eb88a788480

VBScript
MD5: 12adc60e8dfdcfded66a8eb88a788480
Size: 204.4 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 199.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b7a796509a50129a445b34f694dfb27587fec8bb1d044350f8560ad59c49c470
MD5
12adc60e8dfdcfded66a8eb88a788480
Verdict
Malicious
File type
VBScript · 199.6 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/b7a796509a50129a445b34f694dfb27587fec8bb1d044350f8560ad59c49c470

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
204.4 KB · 204,402 B
First seen
2026-10-30 07:45 · 2 hours ago
Last seen
2026-10-30 07:45 · 2 hours ago
Last analysis
2026-10-30 07:45 · 2 hours ago
Hashes
MD5 12adc60e8dfdcfded66a8eb88a788480 Sha1 5200948decb71d15b74e8b0b95ae5726256b28ac Sha256 b7a796509a50129a445b34f694dfb27587fec8bb1d044350f8560ad59c49c470 Sha384 0105a524da242bd427657b8380bedc40b1aa25401ddf683d270f44becb5aed98bbd785c73bcd251d3fc5a3bb786ed840 Sha512 5ef4cc267531e8ef73f3905cbffc26d782ddd7acaa5100ac8dafc07f9db7acf9b6195d5ecf4948b40638b8311bc4b37b4d6ce8f5cb147d9a20ba459d6b364973 SSDeep 3072:WuixChG3qA8EU8bOKIvO1UNkUSqvxO1Rv3k33vHzblo4tAwIvqUObT89mekk0pXi:YZ8EPcG8vMcHNoTyUeIXk7ON TLSH 2214F0866C42369FD3D265ED4F26E93FE70880C5972CB2293E5F2196D9BA4A30FC41D0
Detection
Symbol obfuscation
Low

1 malicious · 2 files
VBS12adc60e8dfdcfded66a8eb88a788480
VBS12adc60e8dfdcfded66a8eb88a788480.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
technique1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
VBS12adc60e8dfdcfded66a8eb88a788480
VBS12adc60e8dfdcfded66a8eb88a788480.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
12adc60e8dfdcfded66a8eb88a788480
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙