Malicious
758afea95b818063536b6fd7a5a15a92
VBScript
MD5: 758afea95b818063536b6fd7a5a15a92
Size: 771.58 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Microsoft Office Document
Size
771.58 KB · 771,584 B
First seen
2026-07-14 18:46 · 3 months ago
Last seen
2026-07-14 18:46 · 3 months ago
Last analysis
2026-07-14 18:47 · 3 months ago
Hashes
MD5
758afea95b818063536b6fd7a5a15a92
Sha1
227e61eca20d832241a1e152920c42bf049f2e69
Sha256
cb60c05a179fc2f196486101d1c49be82cb4f6f1771212b02f21b97cfaa0331c
Sha384
61da16c4fcae99c3a5c48c892097ed15d385fa67d495f58714e1180de7c226faaf2d406b6ef7578ff78b4354dd70bcad
Sha512
a0a1eef62aae0047dd81ca9b7034530c9e198a7c3c5c32a7f9cf844a4b0c8bb976acd947652364bc3f2a81a55c19e5885582a2fc64f86eb21a8b3cf3bdf353b3
SSDeep
12288:K17aw2vxK1HBY3EfIfRLWOK6U0x9CFbrD2iKmYhKmiOg:/TAhgCIU0uFfD2iKo
TLSH
08F46C11FD56C838CA62653ADCC106F23A707C024E0AED8B3518733E7FB79775A6A616
23 malicious · 43 files
VBS758afea95b818063536b6fd7a5a15a92T1027 · T1059.005 · ATT&CK T1564.007
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBSModule1T1027 · T1059.005 · ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBS[Full Diff]T1027 · T1059.005 · ATT&CK T1564.007
VBS[Full Diff].deobfuscated.vbsT1059.005
VBA[Partial Diff]ATT&CK T1564.007
VBSModule1.deobfuscated.vbsT1059.005
VBAModule2ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBA[Full Diff]ATT&CK T1564.007
VBA[Partial Diff]ATT&CK T1564.007
VBAModule3ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBA[Full Diff]ATT&CK T1564.007
VBA[Partial Diff]ATT&CK T1564.007
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
BIN__SRP_8
BIN__SRP_9
BIN__SRP_a
BIN__SRP_b
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
7 / 7
Path
ole:doc~T1027~T1059.005~T1564.007>bin
Shape
ole:doc>bin
malicious
2 nodes
Path
ole:doc~T1027~T1059.005~T1564.007>ole:vba~T1059.005~T1564.007
Shape
ole:doc>ole:vba
malicious
2 nodes
23 malicious · 43 files
VBS758afea95b818063536b6fd7a5a15a92T1027 · T1059.005 · ATT&CK T1564.007
BINRoot Entry
BINCompObj
BINWorkbook
BINSummaryInformation
BINDocumentSummaryInformation
BIN_VBA_PROJECT_CUR
BINPROJECT
BINPROJECTwm
BINVBA
BINdir
VBSModule1T1027 · T1059.005 · ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBS[Full Diff]T1027 · T1059.005 · ATT&CK T1564.007
VBS[Full Diff].deobfuscated.vbsT1059.005
VBA[Partial Diff]ATT&CK T1564.007
VBSModule1.deobfuscated.vbsT1059.005
VBAModule2ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBA[Full Diff]ATT&CK T1564.007
VBA[Partial Diff]ATT&CK T1564.007
VBAModule3ATT&CK T1564.007
VBS[Stored VBA]T1059.005 · ATT&CK T1564.007
VBA[PCode]ATT&CK T1564.007
VBS[Decompiled VBA]T1059.005 · ATT&CK T1564.007
VBA[Full Diff]ATT&CK T1564.007
VBA[Partial Diff]ATT&CK T1564.007
BIN__SRP_0
BIN__SRP_1
BIN__SRP_2
BIN__SRP_3
BIN__SRP_4
BIN__SRP_5
BIN__SRP_8
BIN__SRP_9
BIN__SRP_a
BIN__SRP_b
VBAThisWorkbook
VBS[Stored VBA]T1059.005
VBA[PCode]
VBS[Decompiled VBA]T1059.005
BIN_VBA_PROJECT
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account