Malicious
6f708da3b6ab4fdf366ca39f40940a5c
VBScript
MD5: 6f708da3b6ab4fdf366ca39f40940a5c
Size: 74.73 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 73 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a6c49cfda1a339f2db60dee501e599a417bb028d69309891085276a516cd3f80
- MD5
- 6f708da3b6ab4fdf366ca39f40940a5c
- Verdict
- Malicious
- File type
- VBScript · 73 KB
Cite this report: https://app.malva.re/sha256/a6c49cfda1a339f2db60dee501e599a417bb028d69309891085276a516cd3f80
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.73 KB · 74,730 B
First seen
2026-10-26 08:00 · an hour ago
Last seen
2026-10-26 08:00 · an hour ago
Last analysis
2026-10-26 08:00 · an hour ago
Hashes
MD5
6f708da3b6ab4fdf366ca39f40940a5c
Sha1
b17d7bcb097163bd64b11930f292b4c0aba9269a
Sha256
a6c49cfda1a339f2db60dee501e599a417bb028d69309891085276a516cd3f80
Sha384
c1c554ba248444c39c0213786439865c5816ecac570e84c3cee8bea2c96d4614e42a8b1bf025664bf5da1023a51e1e2c
Sha512
be59982f0d1dce0196544dd36bd55eae266fbb54d7c04ca84cc166947e3f3126a7d3b8514c72d3ed705da3acc58c91af3206310d14b7f9815c64ffaad583a335
SSDeep
1536:zo3G2RA8hXYyBqmI0zqKWEHjpSLSOQiH0xtzgl+AzIx:zcGCdYyU0zqKFjp2SON0vzgl+eM
TLSH
8B736C70EE15061A0E5B27EAFD981A61C5BC8225061340F5FEE9170DA107EECE3FE66D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS6f708da3b6ab4fdf366ca39f40940a5cT1027 · T1059.005
VBS6f708da3b6ab4fdf366ca39f40940a5c.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS6f708da3b6ab4fdf366ca39f40940a5cT1027 · T1059.005
VBS6f708da3b6ab4fdf366ca39f40940a5c.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account