Malicious
Malicious

VBScript
MD5: 4c5c385b2acfc542a110b157bd9fb17f
Size: 16.13 KB
text/vbscript

This sample is a 15.7 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 1 YARA rule. Observed behaviours map to MITRE ATT&CK T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
97d7f3b893f0797f06e7f14cfb220463b91cdb3b85f28c651ff0983693db9b55
MD5
4c5c385b2acfc542a110b157bd9fb17f
Verdict
Malicious
File type
VBScript · 15.7 KB
MITRE ATT&CK
T1059.005

Cite this report: https://app.malva.re/sha256/97d7f3b893f0797f06e7f14cfb220463b91cdb3b85f28c651ff0983693db9b55

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
16.13 KB · 16,127 B
First seen
2026-02-28 10:31 · 8 months ago
Last seen
2026-02-28 10:31 · 8 months ago
Last analysis
2026-03-03 09:45 · 8 months ago
Hashes
MD5 4c5c385b2acfc542a110b157bd9fb17f Sha1 555147e393e4aaaff20c1e59f1aab0d4ade51383 Sha256 97d7f3b893f0797f06e7f14cfb220463b91cdb3b85f28c651ff0983693db9b55 Sha384 130c2060a2d87d8ecc263d1fe5c9759c4754247a44817a2563c0dd059ec39a4ac684e1d70a749fd17332e1b2a58514c4 Sha512 f86ee448b1ccec1d0d0ae6bbd6f70fbd082a20343ee218c6edb59f8daa3eee2cff4cba2bc5499c248ab13382bd1475ebda4147ce50b7682fdfae91b7e0a05799 SSDeep 384:KC9qsN27CJBr7Xm0xXs+74XqGhWNlD2aPQ/6lRshy2ESAOlTQvDmlqjr:K2v2czXpbUTS8gDmk TLSH 7972B41A9915DFF00A3D3194B69B6D16A51043A7A4383E4D7C8FC4AD3F3AA10CFE11EA

1 malicious · 2 files
VBS4c5c385b2acfc542a110b157bd9fb17f
VBS4c5c385b2acfc542a110b157bd9fb17f.deobfuscated.vbs

1 malicious · 2 files
VBS4c5c385b2acfc542a110b157bd9fb17f
VBS4c5c385b2acfc542a110b157bd9fb17f.deobfuscated.vbs
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙