Malicious
VBScript
MD5: 521d72df321dc0b1bb933728ca2fe274
Size: 74.86 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 73.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 2606fc9c3b3f22688249fe71d57ac9a298a5617b8aa4ecb7ab96f1db405db11f
- MD5
- 521d72df321dc0b1bb933728ca2fe274
- Verdict
- Malicious
- File type
- VBScript · 73.1 KB
Cite this report: https://app.malva.re/sha256/2606fc9c3b3f22688249fe71d57ac9a298a5617b8aa4ecb7ab96f1db405db11f
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.86 KB · 74,855 B
First seen
2026-10-26 08:00 · 47 minutes ago
Last seen
2026-10-26 08:00 · 47 minutes ago
Last analysis
2026-10-26 08:00 · 47 minutes ago
Hashes
MD5
521d72df321dc0b1bb933728ca2fe274
Sha1
40157635f0714055ace4d1ecd409550c5db63da9
Sha256
2606fc9c3b3f22688249fe71d57ac9a298a5617b8aa4ecb7ab96f1db405db11f
Sha384
ce075c00edd5cf98c7353916d185683f1f6c5a47902573155f0e993ff6324022eebbf27e23346b8696834917fd98fab3
Sha512
1c406a8c58129bcf50dc85184d76bd45c76f16adbe2b39a62ff7711d129329ca4fc30d8aa450459174c8e7f92f469fe0e4c045e145a42127d018252f6bcb5ea1
SSDeep
1536:zo382cN8C95Zwcu9yBJQ+pI0zpJonHR3Sj5OYd0JxCzgl+Az+n9:zc8DjScu9yED0zpJiR3W5OTJ0zgl+e+9
TLSH
52736C70EE54065A0E0B27EAFC994A71C5BC8225422750F5FFE9170EA1079ECE3FD629
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS521d72df321dc0b1bb933728ca2fe274T1027 · T1059.005
VBS521d72df321dc0b1bb933728ca2fe274.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes