Suspicious
Suspect

74bb598c262cab9ebd8a58f20a895055

Share on LinkedIn
Print
VBScript
MD5: 74bb598c262cab9ebd8a58f20a895055
Size: 13.96 MB
text/vbscript

This sample is a 13.3 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. It matches 3 YARA rules. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
ef67a672ece71861f810bdff3e9bdbf5bc14daa347861bed3ce1d1dddb68031c
MD5
74bb598c262cab9ebd8a58f20a895055
Verdict
Inconclusive
File type
VBScript · 13.3 MB

Cite this report: https://app.malva.re/sha256/ef67a672ece71861f810bdff3e9bdbf5bc14daa347861bed3ce1d1dddb68031c

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
13.96 MB · 13,960,192 B
First seen
2026-10-24 01:30 · 9 days ago
Last seen
2026-10-24 01:30 · 9 days ago
Last analysis
2026-10-24 01:30 · 9 days ago
Hashes
MD5 74bb598c262cab9ebd8a58f20a895055 Sha1 54aec96ccef8d1f0bf94e3276f4f5c09ecf30d4a Sha256 ef67a672ece71861f810bdff3e9bdbf5bc14daa347861bed3ce1d1dddb68031c Sha384 efc8e7140c02b3bdade784917aa566dc15fea0de581d72cc8bc2383fed2438d1c0f360eebc3227b64065d06e588f4a9d Sha512 b8dfef8081f8519d81a7d7e8a3e7fabc4e6b3f3669c4843a61b8832cd6c408febf6afa7905c571c5dbedf44293167743975183902dd459120677f11d81a72bf3 SSDeep 393216:31KzB6u3Yiv3wEUV3m7yYzNvjl09eE4OdsI:s0uoivJ2p2VjiiI TLSH 06E63342FA9B49E3E98F14B0599572EBC31D3F84DC14D8B2D654BE87EC32B71B049688
Detection
PeID
Microsoft Visual C++ v6.0 DLLUPolyX 0.3 -> delikon

10 files
VBS74bb598c262cab9ebd8a58f20a895055
Structure
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 2 STICH kept: 1secondary ignored: 1
bin 1

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path pe:exe>pe:rsrc>scr:vbs
Shape pe:exe>pe:rsrc>scr:vbs
3 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙