Malicious
VBScript
MD5: 2eeb9cd0b0805b9270a9c28eebac6376
Size: 82.03 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 80.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661
- MD5
- 2eeb9cd0b0805b9270a9c28eebac6376
- Verdict
- Malicious
- File type
- VBScript · 80.1 KB
Cite this report: https://app.malva.re/sha256/630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
82.03 KB · 82,026 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
2eeb9cd0b0805b9270a9c28eebac6376
Sha1
f23c699a47d0b59f6ff5b8c2b6dfd02b2f45c326
Sha256
630ddc91cd4f3a41d32cc651c0cda29441a32e0d7efbfbb81a8462f5589e6661
Sha384
fa5bb25e974795547d37f918cef63c33d033fb0aa2cebb5aabad7d1c973e47ea9eba21e2064ab0a464ffae16dda3affa
Sha512
247e3e8af7970769350850c9659b58730eb7f35de360a0ab6f70f3dbbf41c870712f2e7aa9838ef87531f929902d878328f0a3bc2c48d4eefc7b396b1d203307
SSDeep
1536:nlTfSsYXSm5uC75mXLmHYlSn/KCpnArYUjZ/Kb:nlDHYv5ugmXLm4lSn/7VArt/Kb
TLSH
528306E398C021050A062A9DA84E07B1B6A90137D3DBFC6FF9DC7749108695EF2FAD75
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS2eeb9cd0b0805b9270a9c28eebac6376T1027 · T1059.005
VBS2eeb9cd0b0805b9270a9c28eebac6376.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential