Malicious
VBScript
MD5: 3f14994b6f6135c370d96cc91fcd5152
Size: 8.12 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 7.7 MB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- c3137d7394274b81104bb6bd4943bb2265ca6373c8894a51e1c681e0d673634f
- MD5
- 3f14994b6f6135c370d96cc91fcd5152
- Verdict
- Malicious
- File type
- VBScript · 7.7 MB
Cite this report: https://app.malva.re/sha256/c3137d7394274b81104bb6bd4943bb2265ca6373c8894a51e1c681e0d673634f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
8.12 MB · 8,123,797 B
First seen
2026-11-01 06:30 · 3 hours ago
Last seen
2026-11-01 06:30 · 3 hours ago
Last analysis
2026-11-01 06:31 · 3 hours ago
Hashes
MD5
3f14994b6f6135c370d96cc91fcd5152
Sha1
40fbd204fb847a2304343e090c0b39238fe5d40f
Sha256
c3137d7394274b81104bb6bd4943bb2265ca6373c8894a51e1c681e0d673634f
Sha384
79dd21aeb7a0d17800cd5d8e763177e4ddb4d37e7755e79127450a990bd9c1e2aeaeac67f402dff5548b29c2fee0a410
Sha512
914b0569ca0b6cb97e730bfdd28e940c07f00b94db831eb8403c047c29bcd763903beccdc6a9f6cf3d1fd9731b42283064e85a60982d798219337b636a47856b
SSDeep
49152:kVyEs2I9WY3n5Pqgs1EHwfaT9EftF5SbgcPAVU5gvX6YQWmWKcNNam1jNJyEupQH:JgkchjNJrkqcuikktFJjlu9CQYpod+xm
TLSH
36863A20FF8711B0197F6784F9436426E8D8A512A6171451FEDE826EF30FACCA29D739
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS3f14994b6f6135c370d96cc91fcd5152T1027 · T1059.005
VBS3f14994b6f6135c370d96cc91fcd5152.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential