Malicious
VBScript
MD5: 2765a03d5e86f43feb3b1a741c79132b
Size: 205.31 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 200.5 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 803dd88c5d9d31efca6246947a212d1fd26e62db985ce0868285585231bbf1b3
- MD5
- 2765a03d5e86f43feb3b1a741c79132b
- Verdict
- Malicious
- File type
- VBScript · 200.5 KB
Cite this report: https://app.malva.re/sha256/803dd88c5d9d31efca6246947a212d1fd26e62db985ce0868285585231bbf1b3
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
205.31 KB · 205,313 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
2765a03d5e86f43feb3b1a741c79132b
Sha1
ad2458861fd43c255d64c3930116bc89aa9eb959
Sha256
803dd88c5d9d31efca6246947a212d1fd26e62db985ce0868285585231bbf1b3
Sha384
14983649c97ce58b6367717372f8a1be08e8ac67159640c4853707984a7b289012ff021d756317c6b3a7bed0608d96c5
Sha512
6c54ead731a07250c99976f2115f4fbbde7e4c9ba6797746636387b1a6c36c06dc4559bbf77d874877da9037810ea48cf01447be1be925a17950d5eb87fcae5b
SSDeep
3072:AdTjwpIor4hvMXP6hSz+NV20IcSEbwBqr3/XyKUTXLIxykZ94kEceMzL/a3jupVu:AdTjhGSTVbICIq+TXLIxyc99XWSfpA1
TLSH
4514E1608F413A03C6D532AE5B12C41F5B6E19C38B2CBA0D7D0F8665AFBA46356D69C1
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS2765a03d5e86f43feb3b1a741c79132bT1027 · T1059.005
VBS2765a03d5e86f43feb3b1a741c79132b.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential