Malicious
64365756169e5244038bfbc552bcc488
VBScript
MD5: 64365756169e5244038bfbc552bcc488
Size: 208.61 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 203.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
- MD5
- 64365756169e5244038bfbc552bcc488
- Verdict
- Malicious
- File type
- VBScript · 203.7 KB
Cite this report: https://app.malva.re/sha256/7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
208.61 KB · 208,613 B
First seen
2026-11-04 11:00 · 2 hours ago
Last seen
2026-11-04 11:00 · 2 hours ago
Last analysis
2026-11-04 11:01 · 2 hours ago
Hashes
MD5
64365756169e5244038bfbc552bcc488
Sha1
8bb6ce58b92f9edba7c8975bb3c077c3b1ebdd09
Sha256
7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
Sha384
8e260357e84112a3e9b160015b50b1678fc83720fceaf6deb722cd04f2992fe2ff88c5887862d7fde94d0af6269b7ccf
Sha512
263ffdec8221c9d692561efe1a708e8669819148ec5dc36c47b844d6d9d29c7350395c5a36bea185619f7e3fc75e648626213d15d974865a614023e4dfb53fdb
SSDeep
6144:LIRqeRmjU8l5LBfzpsyGsiyIMpCB5YfF1bN2DGGEUU1Hbzz9z3+6am:L2qeRmw8FpsyGsiyIMpCBef3bNLgOzzx
TLSH
E614F18665883440F75A3697FCE3823690D98AB2411EB90F3DBDB7642F23B441BF7462
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS64365756169e5244038bfbc552bcc488T1027 · T1059.005
VBS64365756169e5244038bfbc552bcc488.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
VBS64365756169e5244038bfbc552bcc488T1027 · T1059.005
VBS64365756169e5244038bfbc552bcc488.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
64365756169e5244038bfbc552bcc488
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account