Suspicious
Suspect

56aebc06de28a83c1efc53726ed4bf08

VBScript
MD5: 56aebc06de28a83c1efc53726ed4bf08
Size: 4.6 MB
text/vbscript

This sample is a 4.4 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 3 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b462d19b517445c559ec2de029863eafe5ed037a25a692200f73a65f75dfd100
MD5
56aebc06de28a83c1efc53726ed4bf08
Verdict
Inconclusive
File type
VBScript · 4.4 MB

Cite this report: https://app.malva.re/sha256/b462d19b517445c559ec2de029863eafe5ed037a25a692200f73a65f75dfd100

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
4.6 MB · 4,599,912 B
First seen
2026-08-14 14:31 · 2 months ago
Last seen
2026-08-14 14:31 · 2 months ago
Last analysis
2026-08-14 14:45 · 2 months ago
Hashes
MD5 56aebc06de28a83c1efc53726ed4bf08 Sha1 f4c132194cad02f47159cba0bc15025b6dcd2809 Sha256 b462d19b517445c559ec2de029863eafe5ed037a25a692200f73a65f75dfd100 Sha384 1ca59304b71607d62b330c5de83872128c675ce7487e6e4daea9349b3fb9320c1d3f78ed1955c727aa6b89f96960ec93 Sha512 943798d1ec9d587710867986403eccf04d813057f314f1d61817d7ea906156c932a7cb5960063d454a503281ebbc6ee5bb887b80ba797bcd8f51727b349df153 SSDeep 49152:uhXH9ktlxeRwpD9n+jtIQwvEPXHP5he6/C:uhtkTwRwpD9n+twsPXW TLSH B126281525C64227F4E705BEEB18B309DFADB4152FECF75FD15049BBAC220A2896027B
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ v6.0 DLL

4 files
VBS56aebc06de28a83c1efc53726ed4bf08
Structure
P7B[Authenticode]_3205fb45.p7b
BINOverlay_37714b66.bin
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
STICH beta

No STICH Path has been generated for this analysis yet.

2 structural branches were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 2

Name Value
Info
Authenticode present at 0x461000 size 7272 bytes
Info
Overlay extracted: Overlay_37714b66.bin (1024 bytes)

4 files
VBS56aebc06de28a83c1efc53726ed4bf08
Structure
P7B[Authenticode]_3205fb45.p7b
BINOverlay_37714b66.bin
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙