Malicious
VBScript
MD5: 33095124f672cef377a5ee58dfa2f01a
Size: 191.53 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 187 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
- MD5
- 33095124f672cef377a5ee58dfa2f01a
- Verdict
- Malicious
- File type
- VBScript · 187 KB
Cite this report: https://app.malva.re/sha256/e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
191.53 KB · 191,529 B
First seen
2026-10-29 07:15 · an hour ago
Last seen
2026-10-29 07:15 · an hour ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5
33095124f672cef377a5ee58dfa2f01a
Sha1
de21f29399b4d8a162b29da27dac9d7f4ae42cdd
Sha256
e6b2c9a7643b588e5eedaf8cb33eef7cc7727f82ad4a3d1dc41233ce4569b11c
Sha384
0d279a57cff481f00ea34f6c83d2610c291c37abd322c33d1defa6940b5c375de448f226e8d43464bd99d4c0fe157a25
Sha512
5676b4c8496b8faae15993411ceec704bf11f16ac9d2c48a98363496e08eee4f25b3a7549b41d7e62e2de1a7943be376cb802fcf045ab14932b50051f1cd341c
SSDeep
3072:Zi6d4td5HgUGmjxmpK3qbD86uq5MwNHm1Pk2dAUdQIWADDou9eSxmcjBnoJd9lWp:Z3k2UrtfqMXq5M5PCUGQMoKso43
TLSH
E914F1863D457B5FE6C936AC0E50EA1F67882096932F79823CCB0E55C6B9073D9F99C0
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS33095124f672cef377a5ee58dfa2f01aT1027 · T1059.005
VBS33095124f672cef377a5ee58dfa2f01a.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential