Malicious
VBScript
MD5: 50e32a9cb89178a8b2ebc7b9e84ed77d
Size: 195.37 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 190.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d98df17a8f41acbeb0752ee51a293855b37bb8439df925d46c2910b91ca24f9d
- MD5
- 50e32a9cb89178a8b2ebc7b9e84ed77d
- Verdict
- Malicious
- File type
- VBScript · 190.8 KB
Cite this report: https://app.malva.re/sha256/d98df17a8f41acbeb0752ee51a293855b37bb8439df925d46c2910b91ca24f9d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
195.37 KB · 195,373 B
First seen
2026-11-02 07:15 · 2 hours ago
Last seen
2026-11-02 07:15 · 2 hours ago
Last analysis
2026-11-02 07:15 · 2 hours ago
Hashes
MD5
50e32a9cb89178a8b2ebc7b9e84ed77d
Sha1
788784ba0a716147f3d7fdc710465f5ade6f4f00
Sha256
d98df17a8f41acbeb0752ee51a293855b37bb8439df925d46c2910b91ca24f9d
Sha384
9227387a688a7f273ce0d15c3784badd37b1661350572d41f16cd2df893cf012cef07f5f23899c46025aeecb6d3cb406
Sha512
b8edae3545664c046f62668dd3d5e987e8ae623b8fb35078e4de5eb7c3dbb6b1d2346e65e61b773d83387e39f77622f8470bfe62bca75e2fd93be638aaf48915
SSDeep
3072:3lH/SM8q+XUPtw+p1K3AyYFO8c6kVRtf5TsBtrDGPwxggk9JmUvMAySUIroKQeI2:v8qQU2+nMAts7Zn4BtrqYxg79J5vMAH9
TLSH
7D1402A25CDA0F1A89710035D523C627FB362807F00BDC98BEDED5997B85F861E97622
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS50e32a9cb89178a8b2ebc7b9e84ed77dT1027 · T1059.005
VBS50e32a9cb89178a8b2ebc7b9e84ed77d.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential