Malicious
Malicious

5cf36d7a85cf68a5c7e6a56aa5a3a419

VBScript
MD5: 5cf36d7a85cf68a5c7e6a56aa5a3a419
Size: 32.3 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 31.5 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
5aa893a32b6a3a6772ba7fd0e038fb6031aa4b17bd103c301ddbdb1ad13d4558
MD5
5cf36d7a85cf68a5c7e6a56aa5a3a419
Verdict
Malicious
File type
VBScript · 31.5 KB
MITRE ATT&CK
T1027T1059T1059.005

Cite this report: https://app.malva.re/sha256/5aa893a32b6a3a6772ba7fd0e038fb6031aa4b17bd103c301ddbdb1ad13d4558

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
32.3 KB · 32,301 B
First seen
2026-10-29 07:15 · 2 hours ago
Last seen
2026-10-29 07:15 · 2 hours ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5 5cf36d7a85cf68a5c7e6a56aa5a3a419 Sha1 45c70527864b2d1f72a42be3e58382bfc9fa26ef Sha256 5aa893a32b6a3a6772ba7fd0e038fb6031aa4b17bd103c301ddbdb1ad13d4558 Sha384 29a635c116751b2fad3b74f53c523fdfb7441eea26221753dc4a115047ecca9150485e405d171b8f7c73f491062e71f5 Sha512 ea23169aa8b0b99c15000b1a621fd18ea6074423a11e4702bb3714c46a27574435e2702c79005223c759e00965c9a88ab94c8b71e49d08a0b8bdae25542b2ad3 SSDeep 384:KRvBVonH9luboTlGRS8pnFEomN5P8m+g5xAG33KGKiWXcQsrFnICEUw0kJ4lFR60:KlnGHKsKpajbfLLdoUwTFtpAim TLSH 0EE2606287019FF02F3B6956F51BF828E9100362A83BF83D39DE81887B755E5DBC1196
Detection
Symbol obfuscation
High

2 malicious · 2 files
VBS5cf36d7a85cf68a5c7e6a56aa5a3a419
VBS5cf36d7a85cf68a5c7e6a56aa5a3a419.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS5cf36d7a85cf68a5c7e6a56aa5a3a419
VBS5cf36d7a85cf68a5c7e6a56aa5a3a419.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
5cf36d7a85cf68a5c7e6a56aa5a3a419
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙