Malicious
VBScript
MD5: 64365756169e5244038bfbc552bcc488
Size: 208.61 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 203.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
- MD5
- 64365756169e5244038bfbc552bcc488
- Verdict
- Malicious
- File type
- VBScript · 203.7 KB
Cite this report: https://app.malva.re/sha256/7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
208.61 KB · 208,613 B
First seen
2026-11-04 11:00 · an hour ago
Last seen
2026-11-04 11:00 · an hour ago
Last analysis
2026-11-04 11:01 · an hour ago
Hashes
MD5
64365756169e5244038bfbc552bcc488
Sha1
8bb6ce58b92f9edba7c8975bb3c077c3b1ebdd09
Sha256
7bc574fd935dab01676c752a1f18b694ec58ebf38b84218bbe97b1b7e65130fa
Sha384
8e260357e84112a3e9b160015b50b1678fc83720fceaf6deb722cd04f2992fe2ff88c5887862d7fde94d0af6269b7ccf
Sha512
263ffdec8221c9d692561efe1a708e8669819148ec5dc36c47b844d6d9d29c7350395c5a36bea185619f7e3fc75e648626213d15d974865a614023e4dfb53fdb
SSDeep
6144:LIRqeRmjU8l5LBfzpsyGsiyIMpCB5YfF1bN2DGGEUU1Hbzz9z3+6am:L2qeRmw8FpsyGsiyIMpCBef3bNLgOzzx
TLSH
E614F18665883440F75A3697FCE3823690D98AB2411EB90F3DBDB7642F23B441BF7462
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS64365756169e5244038bfbc552bcc488T1027 · T1059.005
VBS64365756169e5244038bfbc552bcc488.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential