Malicious
VBScript
MD5: 3e46f96ceb9d59774f820b3ddcb1d4f0
Size: 9.22 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 8.8 MB VBScript identified by Malva.RE as Stealer Crypter (stealer loader). It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e
- MD5
- 3e46f96ceb9d59774f820b3ddcb1d4f0
- Verdict
- Malicious
- File type
- VBScript · 8.8 MB
- Family
- Stealer Crypter
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e
Related Stealer Crypter samples
- b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583 2026-11-02
- 0086d2f0a06016855a3e583d436fe63e361c605b0a8780bd6e67a80564700e85 2026-10-31
- 5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803 2026-10-30
- 876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352 2026-10-30
- 0008c95fb43bd97dec04c408b61a66a38f59a7912e4d4a058647ef14407463f2 2026-10-30
- 2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6 2026-10-30
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
9.22 MB · 9,221,120 B
First seen
2026-10-30 16:00 · 2 days ago
Last seen
2026-10-30 16:00 · 2 days ago
Last analysis
2026-10-30 16:00 · 2 days ago
Hashes
MD5
3e46f96ceb9d59774f820b3ddcb1d4f0
Sha1
ff51802d4528bee4fb8627a7185939155dc6cb8f
Sha256
9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e
Sha384
50c488c727e0039681840252bf0856dd80f613b7a8e5cdd452624667f02717572a2db34f764cfc8a37ad925294d991bd
Sha512
c2acce614c4bf5f59d9a6bd54568a0df71682534e0e461f53e060245ed70b73c46fc147b06a9a39aa67601e731d181df70883bdc74cf05e800f04fc99911d183
SSDeep
98304:NEYI+7dkycxjKC8M+ihTVzMcw+nJcEmMrPiTEQ:IO6xjKBSZQdHEmMrPiA
TLSH
65964A87FC9559E4C0ADC33089A2A152BB717C485B2163D75B50FE286F33BD0ADBA358
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 1 file
VBS3e46f96ceb9d59774f820b3ddcb1d4f0T1027 · T1055 · T1140Stealer Crypter
Structure
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1027.001~T1055~T1140
Shape
pe:exe
malicious
1 nodes
| Name | Value |
|---|---|
| Attribution | |