Malicious
35b8b67cebb05747f01bff217aae3797
VBScript
MD5: 35b8b67cebb05747f01bff217aae3797
Size: 311.16 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 303.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
- MD5
- 35b8b67cebb05747f01bff217aae3797
- Verdict
- Malicious
- File type
- VBScript · 303.9 KB
Cite this report: https://app.malva.re/sha256/06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
311.16 KB · 311,158 B
First seen
2026-10-29 07:15 · 2 hours ago
Last seen
2026-10-29 07:15 · 2 hours ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5
35b8b67cebb05747f01bff217aae3797
Sha1
65a44b387860dda4f23af61fccfe56dac9a1a856
Sha256
06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
Sha384
12282048d5d0b6eb46d7288a6af37a71cbd0334de2cd54f211359a40bfb39929fa1cf2c08acd4543256a61619f0c5e1e
Sha512
a5aff5b0355039094f2380959648b9e16331190f95537bd3e14bed43ab67ebcb6e44697addfb6c39bf30fab8b77c207a6d06aee920c09f10cc0151a6a19f1382
SSDeep
6144:umoIjpSSJ15/lLdPLLGPCoCOh151Qz7NgIGZ+ERTR4HFWbvC:sapSAl5TLmCoCOfX4ERTRWQLC
TLSH
986401C50F55724B87CDE89D2B20886F07C8CBD3E758B5923D6B42491A7A3628FC56CB
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS35b8b67cebb05747f01bff217aae3797T1027 · T1059.005
VBS35b8b67cebb05747f01bff217aae3797.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBS35b8b67cebb05747f01bff217aae3797T1027 · T1059.005
VBS35b8b67cebb05747f01bff217aae3797.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
35b8b67cebb05747f01bff217aae3797
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account