Suspicious
Suspect

416655f0370ddb7e0d0fc54f136caecc

Share on LinkedIn
Print
VBScript
MD5: 416655f0370ddb7e0d0fc54f136caecc
Size: 13.16 MB
text/vbscript

This sample is a 12.6 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 14 embedded or derived files. It matches 4 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
7169885e9230836cf829ee86035864806a8720cb644e5a1d7f53f914b330cab2
MD5
416655f0370ddb7e0d0fc54f136caecc
Verdict
Inconclusive
File type
VBScript · 12.6 MB

Cite this report: https://app.malva.re/sha256/7169885e9230836cf829ee86035864806a8720cb644e5a1d7f53f914b330cab2

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
13.16 MB · 13,160,760 B
First seen
2026-10-16 00:00 · 13 days ago
Last seen
2026-10-16 00:00 · 13 days ago
Last analysis
2026-10-16 00:00 · 13 days ago
Hashes
MD5 416655f0370ddb7e0d0fc54f136caecc Sha1 687807e64cab3c6a581dbb909a793fa527391e1f Sha256 7169885e9230836cf829ee86035864806a8720cb644e5a1d7f53f914b330cab2 Sha384 ed2652497c7086125f3e4ad1fca537a552840e5bba0ae96a36baa1c758c9849202b55b65cca00fa62786b6c593f2d84a Sha512 f2630f3516c4691e6e2f336c6d35d78ce5a0eb03728d67d9c222c8b13098a869a79b950dd9896c2c42c5cf2086f7fb0b3a2e58c635acf238d486c5833de7c8e7 SSDeep 98304:DdRtkPEdJDNx0v4GIQQ0RpNhK2pOjQxigAekEMZ:N/POhgMpL/AMa TLSH 34D65A13E85194F8C4AEE13A857B95137B307C440B71A3D79A50F6342FBA7D8AEBA314
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!

13 files
VBS416655f0370ddb7e0d0fc54f136caecc
Structure
P7B[Authenticode]_e3ffd5c0.p7b
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 3 STICH kept: 1secondary ignored: 2
bin 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>enc:b64
Shape pe:exe>enc:b64
2 nodes

Name Value
Info
Authenticode present at 0xC8A800 size 10552 bytes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙