Suspicious
Suspect

3ca8beeb1a6ad6a9f62e8d3ef643b28c

Share on LinkedIn
Print
VBScript
MD5: 3ca8beeb1a6ad6a9f62e8d3ef643b28c
Size: 11.38 MB
text/vbscript

This sample is a 10.9 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 13 embedded or derived files. It matches 2 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b906d0c831106a9d2c4bb074074e4d2b9a1a86435f92be98c9d26dee9606f452
MD5
3ca8beeb1a6ad6a9f62e8d3ef643b28c
Verdict
Inconclusive
File type
VBScript · 10.9 MB

Cite this report: https://app.malva.re/sha256/b906d0c831106a9d2c4bb074074e4d2b9a1a86435f92be98c9d26dee9606f452

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
11.38 MB · 11,383,808 B
First seen
2026-10-24 12:15 · 3 days ago
Last seen
2026-10-24 12:15 · 3 days ago
Last analysis
2026-10-24 12:15 · 3 days ago
Hashes
MD5 3ca8beeb1a6ad6a9f62e8d3ef643b28c Sha1 dffbec3b994de070b36342568b2bb40c47344221 Sha256 b906d0c831106a9d2c4bb074074e4d2b9a1a86435f92be98c9d26dee9606f452 Sha384 46cb028d3dd53a9769cb6c358129ef11040130fe89d3874368c00763a8b3cd5c0cb92eadbf62c57d1e446e53c0c72c90 Sha512 08407485c19f9e3966523a2614b75f62cf9cfd2ad78a1c338ec1f3fa91cf52424ef9cd96b4e41ae922a9202801ea6c529ed9480812a0a3baa8e41ab5546c8e47 SSDeep 98304:B8GHLIGs5JvGOQmNhbQWc1ZdqRBiYkYn5U+3cIA39oXfKNa0pdbWMj:B8Gk2shEbjq9/jAtoKa0ak TLSH FEB69DA2E35192AAD52DC03DD355F137D622BC89C736A0EFA6887B502A72FD0173C719
Detection
PeID
Microsoft Visual C++ 8.0Microsoft Visual C++ 8.0 (DLL)Microsoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft Team

14 files
VBS3ca8beeb1a6ad6a9f62e8d3ef643b28c
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1img 1

An error has occurred. This application may no longer respond until reloaded. Reload 🗙