Malicious
VBScript
MD5: 35a7b6e56649f250f748cb451fdff3f9
Size: 3.75 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 3.6 MB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 95bdcbf0b40186b2c92e16a419cfd676aa9a4812bdf1fdc89a29859ea4a9bc7e
- MD5
- 35a7b6e56649f250f748cb451fdff3f9
- Verdict
- Malicious
- File type
- VBScript · 3.6 MB
Cite this report: https://app.malva.re/sha256/95bdcbf0b40186b2c92e16a419cfd676aa9a4812bdf1fdc89a29859ea4a9bc7e
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
3.75 MB · 3,753,181 B
First seen
2026-11-01 06:30 · 3 hours ago
Last seen
2026-11-01 06:30 · 3 hours ago
Last analysis
2026-11-01 06:31 · 3 hours ago
Hashes
MD5
35a7b6e56649f250f748cb451fdff3f9
Sha1
e4ba6b26b53a4080cd668406d42af365b2300683
Sha256
95bdcbf0b40186b2c92e16a419cfd676aa9a4812bdf1fdc89a29859ea4a9bc7e
Sha384
a16885be8ef3d168f6f315eedd46dbbb2656677b3054558ca8d304a7ac1b09cb7265253605456e3e76df15a56a0882dc
Sha512
d8a14d2919b0f0d93d108effbb59df5c88d0ee2c6df64687d40651090c8e1f9607caee2afddd899a7f249eaaa9e1cf7227e1aa7f4c1d39371596a7a7a60c2dd2
SSDeep
49152:xBxPuDaztxwADT6fJX+VHSUffDHhqljkhr506mNgGTilKd4HbTouyhTn1L8ip:htbDT6fJlUfcljmr506mNgGT8bTozL8+
TLSH
E9062932BEA712B4136B959EBA0600297CD67803D2031850FFDE45392B4FE9896DE77D
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS35a7b6e56649f250f748cb451fdff3f9T1027 · T1059.005
VBS35a7b6e56649f250f748cb451fdff3f9.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential