Malicious
VBScript
MD5: 3a901b1bf139041a2c186005daa6b18c
Size: 46.02 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
- MD5
- 3a901b1bf139041a2c186005daa6b18c
- Verdict
- Malicious
- File type
- VBScript · 44.9 KB
Cite this report: https://app.malva.re/sha256/c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
46.02 KB · 46,023 B
First seen
2026-10-26 08:00 · 49 minutes ago
Last seen
2026-10-26 08:00 · 49 minutes ago
Last analysis
2026-10-26 08:00 · 49 minutes ago
Hashes
MD5
3a901b1bf139041a2c186005daa6b18c
Sha1
4d07868ecd28595e340e1e9e92fc6d689ace6613
Sha256
c93ff8a1d65f01482ecafefd9e57ff8d2ce2d3a07f19b55bf57c1cdf6b19e167
Sha384
a7529f865dcbf22cd557c90a0bf7597cd728eecad72f2ab94a8c34812db5e0b9bdd24c07c06ec91fdb8997a76529d37c
Sha512
dab1416211856294fae82f0e51745dd109fa9a7874173959d1efb2053701f62f046d8e4699ef82a235bdfb3371852292e38e3e53bd138b909b083f1dbc1e861b
SSDeep
768:JVUTGpRmjlrb8nbMD1i3hoxkT4gtLVNd8bc7h86t8Iiz37NT7:JVUTMwjtwnbMSB44zd17ud37F7
TLSH
EE236CF5D96521191D0B27FBDC8EA171CABC4161101304F2FEE9735DA40BAACA3BDA4E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS3a901b1bf139041a2c186005daa6b18cT1027 · T1059.005
VBS3a901b1bf139041a2c186005daa6b18c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential