Malicious
21f696bffe49d6400e2214670187173e
VBScript
MD5: 21f696bffe49d6400e2214670187173e
Size: 45.42 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 4bd99465cc37d9b0714a9975aeeac9d51e9b16daa226f0f52b231164b4ef5beb
- MD5
- 21f696bffe49d6400e2214670187173e
- Verdict
- Malicious
- File type
- VBScript · 44.4 KB
Cite this report: https://app.malva.re/sha256/4bd99465cc37d9b0714a9975aeeac9d51e9b16daa226f0f52b231164b4ef5beb
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.42 KB · 45,416 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
21f696bffe49d6400e2214670187173e
Sha1
a593945bc5737a7552c07e9b2ec03f283871b2a0
Sha256
4bd99465cc37d9b0714a9975aeeac9d51e9b16daa226f0f52b231164b4ef5beb
Sha384
54b81f6214bb8963cde7d67bfc5c892b75031405710ebc4dd93a43ff25322211be2213973347298efbe1ef742b64dce3
Sha512
dd2a93ec19cb2cc1314202aa077c70bf483fea00b738c1e843712480437a5065b74c9ca954a97fc1b2c6c1921160161be1090a72ad446072d525e65c805abe52
SSDeep
768:JVUSGHRQvUSrbcMnAVHnsq/xIT4gtLVNA+nRMDgf38OXz37Gl0aL:JVUS0qs44MnAdQ44nAIuDzY37C/L
TLSH
B6134BA8DE1513154C8633BAFCD847A2C5F8822120271466FFD9635CB40A66DB3FDB5D
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS21f696bffe49d6400e2214670187173eT1027 · T1059.005
VBS21f696bffe49d6400e2214670187173e.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS21f696bffe49d6400e2214670187173eT1027 · T1059.005
VBS21f696bffe49d6400e2214670187173e.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
21f696bffe49d6400e2214670187173e
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account