Malicious
553e41ce514ce1ab5cfb6ea7afa536b2
VBScript
MD5: 553e41ce514ce1ab5cfb6ea7afa536b2
Size: 74.71 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 73 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 74f9453911512ffc26bde5e4ab91aed6f099f5411a26f7efa3a4d78082e12e66
- MD5
- 553e41ce514ce1ab5cfb6ea7afa536b2
- Verdict
- Malicious
- File type
- VBScript · 73 KB
Cite this report: https://app.malva.re/sha256/74f9453911512ffc26bde5e4ab91aed6f099f5411a26f7efa3a4d78082e12e66
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.71 KB · 74,713 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
553e41ce514ce1ab5cfb6ea7afa536b2
Sha1
b48b5575fc4029150177ab920d3fb9d251879ce3
Sha256
74f9453911512ffc26bde5e4ab91aed6f099f5411a26f7efa3a4d78082e12e66
Sha384
839cd5cead7fafb94598fe81085a6289a98dbdedb7fdd516af84b19b831a13c14eacda0932e798e1836e005eb0812650
Sha512
db240a2da880dab62b4829d740dd9eba2b8417c68ec77172b5b2c182fd1f7e2a1e9dbd1b125a818691f896b653cb4c8703e87d4a32363a267c19a1c6e4cd4315
SSDeep
1536:zo3p2K6/LxoHWoSrb8yxuQI0zRmK8HYTS7POcYOPxVzgl+AzbD:zcpSVLoSP8yS0zRmdYTOPO2PHzgl+ebD
TLSH
95736C70EE59065A0E0B2BAAFD990A61C5BC8255022340B5FFD9170DA1079ECF3FE76D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS553e41ce514ce1ab5cfb6ea7afa536b2T1027 · T1059.005
VBS553e41ce514ce1ab5cfb6ea7afa536b2.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS553e41ce514ce1ab5cfb6ea7afa536b2T1027 · T1059.005
VBS553e41ce514ce1ab5cfb6ea7afa536b2.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account