Malicious
33095124f672cef377a5ee58dfa2f01a
VBScript
MD5: 33095124f672cef377a5ee58dfa2f01a
Size: 191.53 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 187 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
- MD5
- 33095124f672cef377a5ee58dfa2f01a
- Verdict
- Malicious
- File type
- VBScript · 187 KB
Cite this report: https://app.malva.re/sha256/e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
191.53 KB · 191,529 B
First seen
2026-10-29 07:15 · 2 hours ago
Last seen
2026-10-29 07:15 · 2 hours ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5
33095124f672cef377a5ee58dfa2f01a
Sha1
de21f29399b4d8a162b29da27dac9d7f4ae42cdd
Sha256
e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
Sha384
0d279a57cff481f00ea34f6c83d2610c291c37abd322c33d1defa6940b5c375de448f226e8d43464bd99d4c0fe157a25
Sha512
5676b4c8496b8faae15993411ceec704bf11f16ac9d2c48a98363496e08eee4f25b3a7549b41d7e62e2de1a7943be376cb802fcf045ab14932b50051f1cd341c
SSDeep
3072:Zi6d4td5HgUGmjxmpK3qbD86uq5MwNHm1Pk2dAUdQIWADDou9eSxmcjBnoJd9lWp:Z3k2UrtfqMXq5M5PCUGQMoKso43
TLSH
E914F1863D457B5FE6C936AC0E50EA1F67882096932F79823CCB0E55C6B9073D9F99C0
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS33095124f672cef377a5ee58dfa2f01aT1027 · T1059.005
VBS33095124f672cef377a5ee58dfa2f01a.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBS33095124f672cef377a5ee58dfa2f01aT1027 · T1059.005
VBS33095124f672cef377a5ee58dfa2f01a.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
33095124f672cef377a5ee58dfa2f01a
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account