Malicious
Malicious

2eeb9cd0b0805b9270a9c28eebac6376

VBScript
MD5: 2eeb9cd0b0805b9270a9c28eebac6376
Size: 82.03 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 80.1 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661
MD5
2eeb9cd0b0805b9270a9c28eebac6376
Verdict
Malicious
File type
VBScript · 80.1 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
82.03 KB · 82,026 B
First seen
2026-10-30 07:45 · 2 hours ago
Last seen
2026-10-30 07:45 · 2 hours ago
Last analysis
2026-10-30 07:45 · 2 hours ago
Hashes
MD5 2eeb9cd0b0805b9270a9c28eebac6376 Sha1 f23c699a47d0b59f6ff5b8c2b6dfd02b2f45c326 Sha256 630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661 Sha384 fa5bb25e974795547d37f918cef63c33d033fb0aa2cebb5aabad7d1c973e47ea9eba21e2064ab0a464ffae16dda3affa Sha512 247e3e8af7970769350850c9659b58730eb7f35de360a0ab6f70f3dbbf41c870712f2e7aa9838ef87531f929902d878328f0a3bc2c48d4eefc7b396b1d203307 SSDeep 1536:nlTfSsYXSm5uC75mXLmHYlSn/KCpnArYUjZ/Kb:nlDHYv5ugmXLm4lSn/7VArt/Kb TLSH 528306E398C021050A062A9DA84E07B1B6A90137D3DBFC6FF9DC7749108695EF2FAD75
Detection
Symbol obfuscation
Low

2 malicious · 2 files
VBS2eeb9cd0b0805b9270a9c28eebac6376
VBS2eeb9cd0b0805b9270a9c28eebac6376.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS2eeb9cd0b0805b9270a9c28eebac6376
VBS2eeb9cd0b0805b9270a9c28eebac6376.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
2eeb9cd0b0805b9270a9c28eebac6376
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙