Malicious
VBScript
MD5: 3cbac31710960e2001a03a69ecba92a0
Size: 46.41 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 45.3 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ce5f0c76da0ec54fa4785b779d7df56d1703e0988f448a1efbc69d0d40854262
- MD5
- 3cbac31710960e2001a03a69ecba92a0
- Verdict
- Malicious
- File type
- VBScript · 45.3 KB
Cite this report: https://app.malva.re/sha256/ce5f0c76da0ec54fa4785b779d7df56d1703e0988f448a1efbc69d0d40854262
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
46.41 KB · 46,407 B
First seen
2026-10-26 08:00 · 47 minutes ago
Last seen
2026-10-26 08:00 · 47 minutes ago
Last analysis
2026-10-26 08:00 · 47 minutes ago
Hashes
MD5
3cbac31710960e2001a03a69ecba92a0
Sha1
26d0572f2c460e3546f20eb3e937aae10f05bafd
Sha256
ce5f0c76da0ec54fa4785b779d7df56d1703e0988f448a1efbc69d0d40854262
Sha384
370a40d98c63e69696be6f827e73576f2fd2b1c24caea899c9d0479eac42f4442da709a8e780011b00d5114dc2b6b326
Sha512
190c107979d1326774c061d4b356510cfb67c4854b6c6ab2ec59abc69f6f9bc32458e9bade4d1e5f6df35e9663c87a234fe97af6afe562f4f67197b34744ec85
SSDeep
768:JVU3GCURNoSrbn1Vn/j5ooQxHroVs4wM9lLVjXUZ/5mnih48fFz37PuTqf:JVU3O3o47Hn/NoV0+4w6llXcmyZ372+f
TLSH
0C234AA0DA64018E0D4B22A9FE884558D4B843AA50733074BED57B4D6F072FE73BE75E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS3cbac31710960e2001a03a69ecba92a0T1027 · T1059.005
VBS3cbac31710960e2001a03a69ecba92a0.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential