Malicious
VBScript
MD5: 66feed9940f44ecde72946f88bae8a6c
Size: 45.42 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 44.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 97dcb6086108556037ffd234a2931b5f10f2c251f83658fc4d6ad16604803088
- MD5
- 66feed9940f44ecde72946f88bae8a6c
- Verdict
- Malicious
- File type
- VBScript · 44.4 KB
Cite this report: https://app.malva.re/sha256/97dcb6086108556037ffd234a2931b5f10f2c251f83658fc4d6ad16604803088
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
45.42 KB · 45,420 B
First seen
2026-10-26 07:46 · an hour ago
Last seen
2026-10-26 07:46 · an hour ago
Last analysis
2026-10-26 07:46 · an hour ago
Hashes
MD5
66feed9940f44ecde72946f88bae8a6c
Sha1
57e76edf014eafd8d0e06d3439bfaf4001ee8a2c
Sha256
97dcb6086108556037ffd234a2931b5f10f2c251f83658fc4d6ad16604803088
Sha384
3b852d11df000c9e1872becc12a64dbbb80f7ef0369661e37a5cd151935b7f70556666b6f7cdc528c317a7c7f251a37e
Sha512
54882986705e427fff3c361839ea281d9f0fb58cf3eee1029d4bdb9400f50ee25e3d149d7a8836ca493575908891756d13b7db0dfd79b0a499df9f2a1b86c738
SSDeep
768:JVU9GGlRKqteCrbJMnH7PukWT0xIT4gtLVtm2IUf88HFjnz37cEPDjHKx:JVUA2dt3VMnbPE/44zmDU3l/37pPDzKx
TLSH
F7135BE0EA9816554E863BAAEC844560C9BC41A5012349F0BED7B74EF40B25CF3FD6DD
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS66feed9940f44ecde72946f88bae8a6cT1027 · T1059.005
VBS66feed9940f44ecde72946f88bae8a6c.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential