Malicious
256da75b4cc324f1d7a911dec918fb60
VBScript
MD5: 256da75b4cc324f1d7a911dec918fb60
Size: 760.17 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 742.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1047 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 02a3ebf3c095543bb1a068492ce2099ed3c16deb6b641e6b3ec9c6ff70cb2a68
- MD5
- 256da75b4cc324f1d7a911dec918fb60
- Verdict
- Malicious
- File type
- VBScript · 742.4 KB
Cite this report: https://app.malva.re/sha256/02a3ebf3c095543bb1a068492ce2099ed3c16deb6b641e6b3ec9c6ff70cb2a68
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
760.17 KB · 760,169 B
First seen
2026-10-29 12:45 · 23 hours ago
Last seen
2026-10-29 12:45 · 23 hours ago
Last analysis
2026-10-29 22:47 · 13 hours ago
Hashes
MD5
256da75b4cc324f1d7a911dec918fb60
Sha1
de0feda265f0ff78e9e45e12bde7e498f0ce1bca
Sha256
02a3ebf3c095543bb1a068492ce2099ed3c16deb6b641e6b3ec9c6ff70cb2a68
Sha384
27cd6bc9b0e692798148729eb81dd53bb53d783e4ab809576970c4f1cedc0644ab86827d792b047a317a0e15381d6963
Sha512
968680e46b5e2847799e41ddafd002d5690d53edf5ce10bd4a26bc5e9396f4477b1b850e6e1cf955e7660959890fddc6fb11656af9f3244c31b6e9af956bc29b
SSDeep
12288:MIA9ZBk0MqsdaDqhxO69E7UuWeRS23Syne8n0pR5ji2:MvHsAoM7Uif30Dc2
TLSH
97F41373BC24215FCE8847EFA06ECD9B6D208223DA1D25D4FD785AC1361A079E6AD13D
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS256da75b4cc324f1d7a911dec918fb60T1027 · T1047 · T1059.005
VBS256da75b4cc324f1d7a911dec918fb60.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1047~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 9huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS256da75b4cc324f1d7a911dec918fb60T1027 · T1047 · T1059.005
VBS256da75b4cc324f1d7a911dec918fb60.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 9huhuhuhuhuhuhuhuhuhuhu
256da75b4cc324f1d7a911dec918fb60
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account