Suspicious
Suspect

1d6cfd8a8c6d4ec0e4ed6ae1b5921939

Share on LinkedIn
Print
VBScript
MD5: 1d6cfd8a8c6d4ec0e4ed6ae1b5921939
Size: 933.72 KB
text/vbscript

This sample is a 911.8 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
6e6b35831c2dd3b9a5d9c3edf9d15ee6a9ec3ff6266446cfe6615fc9b4e0b3f3
MD5
1d6cfd8a8c6d4ec0e4ed6ae1b5921939
Verdict
Inconclusive
File type
VBScript · 911.8 KB

Cite this report: https://app.malva.re/sha256/6e6b35831c2dd3b9a5d9c3edf9d15ee6a9ec3ff6266446cfe6615fc9b4e0b3f3

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
933.72 KB · 933,717 B
First seen
2026-10-13 14:15 · 15 days ago
Last seen
2026-10-13 14:15 · 15 days ago
Last analysis
2026-10-13 14:15 · 15 days ago
Hashes
MD5 1d6cfd8a8c6d4ec0e4ed6ae1b5921939 Sha1 4e27eddae4e8bca02e798d5ffb4d95a323068439 Sha256 6e6b35831c2dd3b9a5d9c3edf9d15ee6a9ec3ff6266446cfe6615fc9b4e0b3f3 Sha384 12b289d74adf4e93b5f296b4403d15514499377b6e8e7cc31ad091ad9c212e84cb80799c6b36584984075b414a12026b Sha512 042c8ed09982bf8c9a2ce83bfcf2ac5c40e5519c732fc3cdabb9daaa99ed407e60657c5b50b0334e1d0f2377f9942b6b8e647fef705ca3392cf961c40594ac8f SSDeep 12288:s+2DIKYyA2fLc6Yx8Ist0kidqlcX+pu60XVFwAjJMtuPE97iBh3TBqmAjUzyn5:zCYj2LxYxXsmKfu3FFdHshsVBqJG25 TLSH C815CD51AC583B87CFDCB51C8F9DD42F93420692076CB6C03AAFA20A12BEB6747DD945

1 file
VBS1d6cfd8a8c6d4ec0e4ed6ae1b5921939
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs
Shape scr:vbs
1 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙