Suspect
VBScript
MD5: 5bcb2d9fed62f007d35999ceb884a7a7
Size: 2.4 MB
text/vbscript
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
2.4 MB · 2,396,160 B
First seen
2026-07-13 19:31 · 3 months ago
Last seen
2026-07-13 19:31 · 3 months ago
Last analysis
2026-07-13 19:32 · 3 months ago
Hashes
MD5
5bcb2d9fed62f007d35999ceb884a7a7
Sha1
3d9e727e26c450913785d74ca3c534f2cf1019da
Sha256
1d08b5a056f3e2d966fcadda088946c760f69b30cb578be619abddc27803c7e8
Sha384
9a065690929355501346f11763c0de45e5baae2f2d44b06a4fd1e389085b7c9672b48798a5eb374521178edb5d123eb6
Sha512
afb37759b9bf417696dfc30a347be0eb95925c2701f7cad69714bd66e53b5d05c980f7300f0b9d826332e22dfe0359de32d73fd87492009464c6aa84c67ce7c5
SSDeep
49152:70uLZnkcL/tZPhoR6WpCQAQlx1QBPfkkNWPZs1qXLVVzCdf:7vrPQSBX4Dq
TLSH
45B57C03E69580BDC06BC170875B9773FA31F8490234BA5F6798DB212F25FA09B2E759
12 files
VBS5bcb2d9fed62f007d35999ceb884a7a7
PDFPDF @0x00000600
PDFUntitled Document.pdf
EXERuntimeBroker.exe
VBSumpdc.dll
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
Structural branches: 5
STICH kept: 2secondary ignored: 3
bin
3Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs>pdf
Shape
scr:vbs>pdf
2 nodes
Path
scr:vbs>pe:dll
Shape
scr:vbs>pe:dll
2 nodes
| Name | Value |
|---|---|
| Version | 1.7 |
| CreationDate | D:20260622202628+03'30' |
| Creator | Writer |
| Producer | LibreOffice 26.2.1.2 (X86_64) |
| /CreationDate | D:20260622202628+03'30' |
| Version | 1.7 |
| CreationDate | D:20260622202628+03'30' |
| Creator | Writer |
| Producer | LibreOffice 26.2.1.2 (X86_64) |
| /CreationDate | D:20260622202628+03'30' |