Malicious
57bcebf8ac60832fb686467fb64afa3f
VBScript
MD5: 57bcebf8ac60832fb686467fb64afa3f
Size: 188.78 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 184.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- e3f22edbcb8cdc56e4dec8e19de1f399de698a36303023d190718182412ad6ee
- MD5
- 57bcebf8ac60832fb686467fb64afa3f
- Verdict
- Malicious
- File type
- VBScript · 184.4 KB
Cite this report: https://app.malva.re/sha256/e3f22edbcb8cdc56e4dec8e19de1f399de698a36303023d190718182412ad6ee
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
188.78 KB · 188,778 B
Hashes
MD5
57bcebf8ac60832fb686467fb64afa3f
Sha1
95026b41edf348f7cccf766fdf3fa66bc9f6e33d
Sha256
e3f22edbcb8cdc56e4dec8e19de1f399de698a36303023d190718182412ad6ee
Sha384
0cf2aac4e2fa355b314f90ee00b6c3b2cb769ba78fdb8d6b7609df3ef75e09dc31394c70fafec572dc4c794e5dd71c16
Sha512
dfec0dac7bb38ca39316e232a9a733c0c89372768ce21591a11a5e9b8656a673a4d5237641d0cbe3e9c5dd563dc5db646daa2131d5d8eb58d3cfba0e9753d8a8
SSDeep
3072:eMpsOLJNLzVRZiEM3MPPPWkysiiA2bFH8zyRJMV+5Eia9Y1z9YZu0LXP3m5Ul6Ve:eMpsOLLLDUF3MnPWkLiiA2bFH8z2MV+c
TLSH
C904F1419B6E2620E5AB053DBCE5E02D813326B7C5193792FC5C75CA07306E08FA797A
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS57bcebf8ac60832fb686467fb64afa3fT1027 · T1059.005
VBS57bcebf8ac60832fb686467fb64afa3f.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
VBS57bcebf8ac60832fb686467fb64afa3fT1027 · T1059.005
VBS57bcebf8ac60832fb686467fb64afa3f.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
57bcebf8ac60832fb686467fb64afa3f
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account