Malicious
VBScript
MD5: 35b8b67cebb05747f01bff217aae3797
Size: 311.16 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 303.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
- MD5
- 35b8b67cebb05747f01bff217aae3797
- Verdict
- Malicious
- File type
- VBScript · 303.9 KB
Cite this report: https://app.malva.re/sha256/06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
311.16 KB · 311,158 B
First seen
2026-10-29 07:15 · an hour ago
Last seen
2026-10-29 07:15 · an hour ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5
35b8b67cebb05747f01bff217aae3797
Sha1
65a44b387860dda4f23af61fccfe56dac9a1a856
Sha256
06a6e3c7b8d7d8c3826111c8f9ba350a130e2d726dcfe6dd2a810c27e5086dea
Sha384
12282048d5d0b6eb46d7288a6af37a71cbd0334de2cd54f211359a40bfb39929fa1cf2c08acd4543256a61619f0c5e1e
Sha512
a5aff5b0355039094f2380959648b9e16331190f95537bd3e14bed43ab67ebcb6e44697addfb6c39bf30fab8b77c207a6d06aee920c09f10cc0151a6a19f1382
SSDeep
6144:umoIjpSSJ15/lLdPLLGPCoCOh151Qz7NgIGZ+ERTR4HFWbvC:sapSAl5TLmCoCOfX4ERTRWQLC
TLSH
986401C50F55724B87CDE89D2B20886F07C8CBD3E758B5923D6B42491A7A3628FC56CB
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS35b8b67cebb05747f01bff217aae3797T1027 · T1059.005
VBS35b8b67cebb05747f01bff217aae3797.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential