Malicious
447f1e62939ad209c47f803d5a068a58
VBScript
MD5: 447f1e62939ad209c47f803d5a068a58
Size: 523.67 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 511.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- fb6c0025feee13664262a6d2190e48e514e1b45bfe1758a2aa1f9ffdfcc4f28b
- MD5
- 447f1e62939ad209c47f803d5a068a58
- Verdict
- Malicious
- File type
- VBScript · 511.4 KB
Cite this report: https://app.malva.re/sha256/fb6c0025feee13664262a6d2190e48e514e1b45bfe1758a2aa1f9ffdfcc4f28b
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
523.67 KB · 523,671 B
First seen
2026-11-04 11:00 · 2 hours ago
Last seen
2026-11-04 11:00 · 2 hours ago
Last analysis
2026-11-04 11:01 · 2 hours ago
Hashes
MD5
447f1e62939ad209c47f803d5a068a58
Sha1
82e88adda23b9cc1797acf5a348f82af25bffba1
Sha256
fb6c0025feee13664262a6d2190e48e514e1b45bfe1758a2aa1f9ffdfcc4f28b
Sha384
c06d7c1ab1dbe05da6b812e316bd2483fedc3813ae5060c513beea367f73c1b7fc902941d77da0785cbbf636a9063e97
Sha512
44e104d8c4208e943f66dad92dabf1f88d5598377d2e2d89e6340c63560f268dd1cd2b4d4e094940e44501f21175ac31c3a4ec62e2c529d10f5462c0c9c4512a
SSDeep
12288:kP/snTUJLsGaf8JeTUwrSGf3Ku46BGpmp6p3PUnNP:01txafkewGETs8OP
TLSH
DCB423E5E6C8114EE2BC5E40E983721F9D95005603B13B063E6F9CACB7575E28F4AF25
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS447f1e62939ad209c47f803d5a068a58T1027 · T1059.005
VBS447f1e62939ad209c47f803d5a068a58.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS447f1e62939ad209c47f803d5a068a58T1027 · T1059.005
VBS447f1e62939ad209c47f803d5a068a58.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account