Malicious
3a901b1bf139041a2c186005daa6b18c
VBScript
MD5: 3a901b1bf139041a2c186005daa6b18c
Size: 46.02 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
- MD5
- 3a901b1bf139041a2c186005daa6b18c
- Verdict
- Malicious
- File type
- VBScript · 44.9 KB
Cite this report: https://app.malva.re/sha256/c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
46.02 KB · 46,023 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
3a901b1bf139041a2c186005daa6b18c
Sha1
4d07868ecd28595e340e1e9e92fc6d689ace6613
Sha256
c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
Sha384
a7529f865dcbf22cd557c90a0bf7597cd728eecad72f2ab94a8c34812db5e0b9bdd24c07c06ec91fdb8997a76529d37c
Sha512
dab1416211856294fae82f0e51745dd109fa9a7874173959d1efb2053701f62f046d8e4699ef82a235bdfb3371852292e38e3e53bd138b909b083f1dbc1e861b
SSDeep
768:JVUTGpRmjlrb8nbMD1i3hoxkT4gtLVNd8bc7h86t8Iiz37NT7:JVUTMwjtwnbMSB44zd17ud37F7
TLSH
EE236CF5D96521191D0B27FBDC8EA171CABC4161101304F2FEE9735DA40BAACA3BDA4E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS3a901b1bf139041a2c186005daa6b18cT1027 · T1059.005
VBS3a901b1bf139041a2c186005daa6b18c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS3a901b1bf139041a2c186005daa6b18cT1027 · T1059.005
VBS3a901b1bf139041a2c186005daa6b18c.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3a901b1bf139041a2c186005daa6b18c
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account