Malicious
Malicious

3f457021db7dc4595c505c517d02af2a

VBScript
MD5: 3f457021db7dc4595c505c517d02af2a
Size: 3.11 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 3 MB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180
MD5
3f457021db7dc4595c505c517d02af2a
Verdict
Malicious
File type
VBScript · 3 MB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
3.11 MB · 3,106,642 B
First seen
2026-10-28 20:00 · an hour ago
Last seen
2026-10-28 20:00 · an hour ago
Last analysis
2026-10-28 20:00 · an hour ago
Hashes
MD5 3f457021db7dc4595c505c517d02af2a Sha1 e5641a94ac47678b206d796e9c2cb357d3d2e199 Sha256 77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180 Sha384 b8b3ddaf4b6175ddce12833ccfd9280949cd79165f0359a01ab257ae87ee42fd705065a63f0b572fd563eddc7e5557f0 Sha512 8f288c748de101bc0c126f6426e55d7e67ad135866cdb372efc4af1f5c81d25d0c6a0911bc9ec5c0a5966437bd3f796645555dab9177155630ace8849f1806e4 SSDeep 49152:E1r7Oc1DHA0o6fgRSEYUaDFxwSieWWdy4S:P TLSH 21E5120E9BBF1F5E84FA845D0AAD56CBE9AE0550CB50E77A7B686506C74CF20CC46C0B
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBS3f457021db7dc4595c505c517d02af2a
VBS3f457021db7dc4595c505c517d02af2a.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #2 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Dropped path (COM trace) #3 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS3f457021db7dc4595c505c517d02af2a
VBS3f457021db7dc4595c505c517d02af2a.deobfuscated.vbs
No malware configuration was found at this point.

Dropped path (COM trace) #1 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
3f457021db7dc4595c505c517d02af2a
Dropped path (COM trace) #2 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
3f457021db7dc4595c505c517d02af2a
Dropped path (COM trace) #3 PATHmalicious
C:\Usehuhuhuhuhuhuhuhuhuhuhu
3f457021db7dc4595c505c517d02af2a
Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
3f457021db7dc4595c505c517d02af2a
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙