Malicious
Malicious

1d7f7a21b0dad29738279bf6cfa224e7

VBScript
MD5: 1d7f7a21b0dad29738279bf6cfa224e7
Size: 46.25 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 45.2 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b9a89b50f1d73a22363c408643e9572c2b60b5d88220c72d10a2050866e9a0aa
MD5
1d7f7a21b0dad29738279bf6cfa224e7
Verdict
Malicious
File type
VBScript · 45.2 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/b9a89b50f1d73a22363c408643e9572c2b60b5d88220c72d10a2050866e9a0aa

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
46.25 KB · 46,254 B
First seen
2026-10-28 05:15 · an hour ago
Last seen
2026-10-28 05:15 · an hour ago
Last analysis
2026-10-28 05:15 · an hour ago
Hashes
MD5 1d7f7a21b0dad29738279bf6cfa224e7 Sha1 7484224719e6ba99d289daf20d50bfadc3221060 Sha256 b9a89b50f1d73a22363c408643e9572c2b60b5d88220c72d10a2050866e9a0aa Sha384 450cceb159692b914e30e2af7429bde6bfd8d1052370ebf98e8dbc817e845b1e1fb60f32a4c284382708a74e6f39c583 Sha512 4bc772f56db4b21f2cb1cac8c95242b41574a59be982277c2498d017ab730322febbbf383478225599de65195e20959cf787e0508489dae86b3d91dd708a7051 SSDeep 384:lJQuSD91WM5lNhyWdniEtQfRp5dhGUNwDTxBbdzkcRudnTOyvrMJvzcQgjWdmuEz:lJbqNh7HTcNLACslGecfS31HE TLSH AE23F93C9E18227FA7F8D614D6D6494FF081B573B6212ECAF0CB1348857756278CAA1E
Detection
Symbol obfuscation
High

2 malicious · 2 files
VBS1d7f7a21b0dad29738279bf6cfa224e7
VBS1d7f7a21b0dad29738279bf6cfa224e7.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS1d7f7a21b0dad29738279bf6cfa224e7
VBS1d7f7a21b0dad29738279bf6cfa224e7.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
1d7f7a21b0dad29738279bf6cfa224e7
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙