Malicious
6424faf4e780e30830fd70c334ae79d1
VBScript
MD5: 6424faf4e780e30830fd70c334ae79d1
Size: 74.77 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 73 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 6ab69065e8a0ce58016f1ef39261304019b6b4654f6cf37cd5398069230a9bb5
- MD5
- 6424faf4e780e30830fd70c334ae79d1
- Verdict
- Malicious
- File type
- VBScript · 73 KB
Cite this report: https://app.malva.re/sha256/6ab69065e8a0ce58016f1ef39261304019b6b4654f6cf37cd5398069230a9bb5
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.77 KB · 74,766 B
Hashes
MD5
6424faf4e780e30830fd70c334ae79d1
Sha1
93b0b2aacfc43a4a4f54ea80976a5f63b8ae781e
Sha256
6ab69065e8a0ce58016f1ef39261304019b6b4654f6cf37cd5398069230a9bb5
Sha384
8b9bfe50239e5652e260fd21992bf9bbd0793b19cd0df883af73f301423aa072cf4863fd0ca9795508e94a7d13f52b35
Sha512
0016777e049d5f3430bb3a6a27fe379c157c3d6b103c56096e806e53897aad1336deaa761f3816082d2bdce3dda31428ad8926de08c720889446206d72cff553
SSDeep
1536:zo392dlm+xhmYImydyI0z72rizYH14SfzOx/ntxbzgl+AzBPnv:zc9t+fImyp0z7mig14uzOJtZzgl+eBPv
TLSH
15736D71EE54021A0E5B27AAFC994AA1C5BCC215062700F5FED9170DA10B9ECF3FE62D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS6424faf4e780e30830fd70c334ae79d1T1027 · T1059.005
VBS6424faf4e780e30830fd70c334ae79d1.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS6424faf4e780e30830fd70c334ae79d1T1027 · T1059.005
VBS6424faf4e780e30830fd70c334ae79d1.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account