Malicious
Malicious

294dd2a9572e885f1a278fe4bc2144f5

Share on LinkedIn
Print
VBScript
MD5: 294dd2a9572e885f1a278fe4bc2144f5
Size: 46.05 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 45 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
512dc74d5ae2aa06cabd56a65342692fa143b94cfe927affcfbae676c2b8f7d5
MD5
294dd2a9572e885f1a278fe4bc2144f5
Verdict
Malicious
File type
VBScript · 45 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/512dc74d5ae2aa06cabd56a65342692fa143b94cfe927affcfbae676c2b8f7d5

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
46.05 KB · 46,052 B
First seen
2026-10-26 08:00 · 48 minutes ago
Last seen
2026-10-26 08:00 · 48 minutes ago
Last analysis
2026-10-26 08:00 · 48 minutes ago
Hashes
MD5 294dd2a9572e885f1a278fe4bc2144f5 Sha1 70a68c61e5b4db05217ec5618c1e48ee2e459293 Sha256 512dc74d5ae2aa06cabd56a65342692fa143b94cfe927affcfbae676c2b8f7d5 Sha384 eb5b7bf393871131e3313983739e29253475770a1ab5abab5e4d89b55a5fb632a094476875b84e65b91a572f9d34d43b Sha512 05d769c39f8c820991b914dbe0799fea1a32bc0bf4277e0863846212df72d34e753adb45c3024cef952d094d6dd5cc16b21fba871150a9c3512c6cb7a85ea7d2 SSDeep 768:JVUVGvhRt4Grb+AnnbrTrQhrUxIT4gtLVz3ikxPHS2Rv8m9z37TWNWebx4:JVUVwh74s6AnbM34453ikxPHM037ay TLSH BD232865DE34351B1D0732A7EC5942A0C5BC82A141230075FFE6F74E6607A6863BEB9F
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBS294dd2a9572e885f1a278fe4bc2144f5
VBS294dd2a9572e885f1a278fe4bc2144f5.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙