Malicious
VBScript
MD5: 6118c1ad15fd52fdb482ab8b969485f5
Size: 90.84 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 88.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 3c9c1a327b8f2ea233df272d236bdb7072859c28677c01bdeba854e0b6d2c336
- MD5
- 6118c1ad15fd52fdb482ab8b969485f5
- Verdict
- Malicious
- File type
- VBScript · 88.7 KB
Cite this report: https://app.malva.re/sha256/3c9c1a327b8f2ea233df272d236bdb7072859c28677c01bdeba854e0b6d2c336
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
90.84 KB · 90,836 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
6118c1ad15fd52fdb482ab8b969485f5
Sha1
0b684149ae3fb7f32995eb7ae52d40554d608e19
Sha256
3c9c1a327b8f2ea233df272d236bdb7072859c28677c01bdeba854e0b6d2c336
Sha384
59da9d0f8cdeca840e1f62aee032c6165a16afa39ea6c4331f5339c8ce1b37cb853f15602c83206ae72be2dd689f98a4
Sha512
a387ccaed504411657c6a834b2ea13133941fd2ff26f3592ed162f68fc25c0ede75a43e67f37cbb28885aff1c03b4e12e721aec9992fa18a534708932e9a5d57
SSDeep
1536:1RDDlrDSU2G5NSgWn0CO5hYvQ5gu4OrNxLyK:1RHlrDSA55Wns5qvQqtOXr
TLSH
BE933A38F91025C42A4E969DBC772773C5E9260DD313206CABE8D24930A69F8D3E9F75
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS6118c1ad15fd52fdb482ab8b969485f5T1027 · T1059.005
VBS6118c1ad15fd52fdb482ab8b969485f5.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential