Malicious
34e651e553f8cedbfc7cbdbf76d7847a
VBScript
MD5: 34e651e553f8cedbfc7cbdbf76d7847a
Size: 74.59 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 72.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c4889a8f6355fc4172907cf72ec72c102221fcd82ec41be0882a0458b6916a32
- MD5
- 34e651e553f8cedbfc7cbdbf76d7847a
- Verdict
- Malicious
- File type
- VBScript · 72.8 KB
Cite this report: https://app.malva.re/sha256/c4889a8f6355fc4172907cf72ec72c102221fcd82ec41be0882a0458b6916a32
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.59 KB · 74,594 B
First seen
2026-10-26 10:45 · 2 hours ago
Last seen
2026-10-26 10:45 · 2 hours ago
Last analysis
2026-10-26 10:45 · 2 hours ago
Hashes
MD5
34e651e553f8cedbfc7cbdbf76d7847a
Sha1
2f6efc6b239ead1b5c5a4a9c87576ccf6f0fb7f5
Sha256
c4889a8f6355fc4172907cf72ec72c102221fcd82ec41be0882a0458b6916a32
Sha384
5fae1dec9247a7e33f7a4d78c1ed0c6c6faf468f5296edf923ef6ae74d4662ca991992dc5de34d85a8c651a8f204c377
Sha512
be4230dc8172bc7fb5ae775e286e4c00903a956818f083bebc3e546d020ba3ad6bee9dec59be152f436686e6089160c467dddd753275736a8a993898c9f6c9ae
SSDeep
1536:zo3z2Y7ln8vy91I0z+6gkHbgSPqOExbsx5zgl+Azeuu:zczL8vyM0z+6Rbg6qOEsrzgl+eeuu
TLSH
0F737D70EE55061A0E0B2BEAFC991A61C5BC8215022340F5FED9670DA507DECE3FE66D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS34e651e553f8cedbfc7cbdbf76d7847aT1027 · T1059.005
VBS34e651e553f8cedbfc7cbdbf76d7847a.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS34e651e553f8cedbfc7cbdbf76d7847aT1027 · T1059.005
VBS34e651e553f8cedbfc7cbdbf76d7847a.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account