Suspicious
Suspect

5bcb2d9fed62f007d35999ceb884a7a7

VBScript
MD5: 5bcb2d9fed62f007d35999ceb884a7a7
Size: 2.4 MB
text/vbscript

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential
File
Type
VBScript file
Size
2.4 MB · 2,396,160 B
First seen
2026-07-13 19:31 · 3 months ago
Last seen
2026-07-13 19:31 · 3 months ago
Last analysis
2026-07-13 19:32 · 3 months ago
Hashes
MD5 5bcb2d9fed62f007d35999ceb884a7a7 Sha1 3d9e727e26c450913785d74ca3c534f2cf1019da Sha256 1d08b5a056f3e2d966fcadda088946c760f69b30cb578be619abddc27803c7e8 Sha384 9a065690929355501346f11763c0de45e5baae2f2d44b06a4fd1e389085b7c9672b48798a5eb374521178edb5d123eb6 Sha512 afb37759b9bf417696dfc30a347be0eb95925c2701f7cad69714bd66e53b5d05c980f7300f0b9d826332e22dfe0359de32d73fd87492009464c6aa84c67ce7c5 SSDeep 49152:70uLZnkcL/tZPhoR6WpCQAQlx1QBPfkkNWPZs1qXLVVzCdf:7vrPQSBX4Dq TLSH 45B57C03E69580BDC06BC170875B9773FA31F8490234BA5F6798DB212F25FA09B2E759
12 files
VBS5bcb2d9fed62f007d35999ceb884a7a7
PDFPDF @0x00000600
PDFUntitled Document.pdf
BINText (Preview)
TXTPage #1
BIN#Stream obj 2 0
BIN#Stream obj 8 0
TXTStructure
EXERuntimeBroker.exe
Structure
P7B[Authenticode]_617e237a.p7b
BINResources
BINRT_VERSION
BINID:0001
BINID:1033
BINRT_MANIFEST
BINID:0001
BINID:1033
VBSumpdc.dll
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 5 STICH kept: 2secondary ignored: 3
bin 3

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs>pdf
Shape scr:vbs>pdf
2 nodes
Path scr:vbs>pe:dll
Shape scr:vbs>pe:dll
2 nodes
Name Value
Version
1.7
CreationDate
D:20260622202628+03'30'
Creator
Writer
Producer
LibreOffice 26.2.1.2 (X86_64)
/CreationDate
D:20260622202628+03'30'
Version
1.7
CreationDate
D:20260622202628+03'30'
Creator
Writer
Producer
LibreOffice 26.2.1.2 (X86_64)
/CreationDate
D:20260622202628+03'30'
12 files
VBS5bcb2d9fed62f007d35999ceb884a7a7
PDFPDF @0x00000600
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙