Malicious VBScript analysis – 77261825ac2b

Ctrl + scroll to zoom · drag to pan

This sample is a 3 MB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256: 77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180
MD5: 3f457021db7dc4595c505c517d02af2a
Verdict: Malicious
File type: VBScript · 3 MB
MITRE ATT&CK: T1027 T1059 T1059.005

Cite this report: https://app.malva.re/sha256/77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.

Unlock with Essential

File

Type

VBScript file

Size

3.11 MB · 3,106,642 B

First seen

2026-10-28 20:00 · an hour ago

Last seen

2026-10-28 20:00 · an hour ago

Last analysis

2026-10-28 20:00 · an hour ago

Hashes

MD5 3f457021db7dc4595c505c517d02af2a Sha1 e5641a94ac47678b206d796e9c2cb357d3d2e199 Sha256 77261825ac2b9fc0b70b9b0c93124c767133a904f2f4d38a452ed6033e18c180 Sha384 b8b3ddaf4b6175ddce12833ccfd9280949cd79165f0359a01ab257ae87ee42fd705065a63f0b572fd563eddc7e5557f0 Sha512 8f288c748de101bc0c126f6426e55d7e67ad135866cdb372efc4af1f5c81d25d0c6a0911bc9ec5c0a5966437bd3f796645555dab9177155630ace8849f1806e4 SSDeep 49152:E1r7Oc1DHA0o6fgRSEYUaDFxwSieWWdy4S:P TLSH 21E5120E9BBF1F5E84FA845D0AAD56CBE9AE0550CB50E77A7B686506C74CF20CC46C0B

Detection

Symbol obfuscation

Medium

2 malicious · 2 files

VBS3f457021db7dc4595c505c517d02af2a

VBS3f457021db7dc4595c505c517d02af2a.deobfuscated.vbs

STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.

Path scr:vbs~T1027~T1059~T1059.005

Shape scr:vbs

malicious 1 nodes

Dropped path (COM trace) #1 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Dropped path (COM trace) #2 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Dropped path (COM trace) #3 PATHmalicious

C:\Usehuhuhuhuhuhuhuhuhuhuhu

Trace COM ordonnée UNKNWOWNmalicious

line 1huhuhuhuhuhuhuhuhuhuhu

Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.

Unlock with Essential

3f457021db7dc4595c505c517d02af2a

Overview

Summary by MalvaGPT

Characteristics

File Structure

Artefacts4

3f457021db7dc4595c505c517d02af2a (3.11 MB)

File Structure

Artefacts4