Malicious
VBScript
MD5: 710294609363b9c1d37540bbbbc4e0bf
Size: 204.39 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 199.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 25ee7569337cc1bfb3176606e12263829ae1ba7107a199a0bb75e4318e424934
- MD5
- 710294609363b9c1d37540bbbbc4e0bf
- Verdict
- Malicious
- File type
- VBScript · 199.6 KB
Cite this report: https://app.malva.re/sha256/25ee7569337cc1bfb3176606e12263829ae1ba7107a199a0bb75e4318e424934
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
204.39 KB · 204,391 B
First seen
2026-11-04 07:00 · 2 hours ago
Last seen
2026-11-04 07:00 · 2 hours ago
Last analysis
2026-11-04 07:00 · 2 hours ago
Hashes
MD5
710294609363b9c1d37540bbbbc4e0bf
Sha1
7250942a43b7fac768cade20cd4e4b1341924438
Sha256
25ee7569337cc1bfb3176606e12263829ae1ba7107a199a0bb75e4318e424934
Sha384
6a84f951db8af86a696e258d753c3528d83b7567eaf670f706f580b4668ca155470b64e56b62a2d25bda50199a818004
Sha512
6a997c451543817fe28b52b3550a95a014988decba3c0f4b00bbb5a4c315bda521de5615e15fdae6ca2948793c1b7cc17c8c00d94737acbb357e2d9fd32286c4
SSDeep
6144:fbIaTjOBcz7o2ZsqE8BVs8cpBkzJUtYNFfH6iHKgGM1Ik:fbIQOBcz7oQsqo8qBYJUqNtLRWk
TLSH
5D14F186D98E3931F4BB860BAC939F036D1518F1659668856E8AD3CC173B3505BCCBB3
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS710294609363b9c1d37540bbbbc4e0bfT1027 · T1059.005
VBS710294609363b9c1d37540bbbbc4e0bf.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential