Malicious
VBScript
MD5: 6cae0521449ffea1c590b436d2e43be6
Size: 31.05 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
31.05 KB · 31,049 B
First seen
2026-10-21 12:01 · 4 days ago
Last seen
2026-10-21 12:01 · 4 days ago
Last analysis
2026-10-21 13:19 · 4 days ago
Hashes
MD5
6cae0521449ffea1c590b436d2e43be6
Sha1
baf19c4a3f98b102fbc67892f269133246aacdd0
Sha256
5435ec2d38053a71a2f474407f4be84dde6b763f88d026c9d59b7f253b0a184e
Sha384
959efb6b94bcc0a08c3c9d9b28d16c1a22738860c4083cfe699de55e75d131eea3df44968a9284d4d160ba3c22511bcb
Sha512
208e7d24c7d6d347aa9eb2cf4d982c727315f3a71ee1ed269cf2b8eca7f81840b11bdde7ce9555e8f7b12da6f33903b77ea93fc52291bac7de2715611ab7de78
SSDeep
192:vTj45ewNSe/7zygoWWhlrC8VnfXuS/q1K91q1LPOUApxPpe3bc1rqCOVkyM5DJtJ:vShCVLRfXXqNrCV3NVLYsQ772ue
TLSH
95D2D8C7B2CD2F79C7BCC8DDA07A9C4409D4777A0CA68A309AF4844FBE9E52504786B5
Detection
Symbol obfuscation
Low
5 malicious · 8 files
VBS6cae0521449ffea1c590b436d2e43be6T1027 · T1059 · T1059.001
VBS6cae0521449ffea1c590b436d2e43be6.deobfuscated.vbsT1059.005
SH[Command #0]
SH[Command #1] T1027 · T1059.001
PS1[PowerShell Command]T1027 · T1059.001
PS1[Deobfuscated PS]
BIN[Base64-Block]
B64[Base64-Block@0x000007C0]
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
3 / 3
Path
scr:vbs~T1027~T1059~T1059.005>scr:bat>scr:ps1~T1027~T1059.001
Shape
scr:vbs>scr:bat>scr:ps1
malicious
3 nodes
Path
scr:vbs~T1027~T1059~T1059.005>enc:b64
Shape
scr:vbs>enc:b64
malicious
2 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential