Malicious
VBScript
MD5: 554b65219e5036aeb0942026a8447b0b
Size: 205.05 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 200.2 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 094bda97bae8bcc8e1938e5ffe627b9746ff21f1c829bd55515e2ea7dec4fc07
- MD5
- 554b65219e5036aeb0942026a8447b0b
- Verdict
- Malicious
- File type
- VBScript · 200.2 KB
Cite this report: https://app.malva.re/sha256/094bda97bae8bcc8e1938e5ffe627b9746ff21f1c829bd55515e2ea7dec4fc07
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
205.05 KB · 205,054 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
554b65219e5036aeb0942026a8447b0b
Sha1
9281b4d64d62b35a7755c109619142b93efeb0ad
Sha256
094bda97bae8bcc8e1938e5ffe627b9746ff21f1c829bd55515e2ea7dec4fc07
Sha384
3629a06dd2ce917cb85133e65fb39daf3df5a1cd2529a1231d360f06938c008fe501d2bbfe4812dbb56fd4f390a15f2c
Sha512
f8770705f221f3039063ce91ea40aba0c267ae0a4eb200820975c842851afc2319246338b1555f3a3b3ab4562bac0d6a0700456fa86727feda9560fc2db2ced0
SSDeep
3072:pAEE5qtIM+Cyi3NTnSzA4qbxqXwguLSxLPY9NCLQlP4yIQX5OXGJjy+:pzE5qqM+CDNTaA4qbxq9VLPY9N13OXE
TLSH
C914F0D44C00364BC6EDA7AE1F9DC93FA7499ACA5B2DA1857D9F43060BFA4331AD48D0
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS554b65219e5036aeb0942026a8447b0bT1027 · T1059.005
VBS554b65219e5036aeb0942026a8447b0b.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential