Malicious
771fbbde14599e5fa882c7c63c43d4fa
VBScript
MD5: 771fbbde14599e5fa882c7c63c43d4fa
Size: 338.65 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 330.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
- MD5
- 771fbbde14599e5fa882c7c63c43d4fa
- Verdict
- Malicious
- File type
- VBScript · 330.7 KB
Cite this report: https://app.malva.re/sha256/507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
338.65 KB · 338,653 B
First seen
2026-11-04 11:00 · 2 hours ago
Last seen
2026-11-04 11:00 · 2 hours ago
Last analysis
2026-11-04 11:01 · 2 hours ago
Hashes
MD5
771fbbde14599e5fa882c7c63c43d4fa
Sha1
e519f79876f5203baa0b4b81d76b94a44c52db14
Sha256
507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
Sha384
a7cffe8987e7135662ad9ec0bec0713da242e00eec9d2d8b6c2deaa4836bc6dcfa884daf7706e3448fb2e0f81b616622
Sha512
c4801ef62fba35d7c30bb54fdf691f1117821b4d06113856139f83d42e5008c61ffcdabf6882196b33028a82399ae39daf6957defd88ea3834dce6afe560c892
SSDeep
6144:S5a8YLS4CNJdcVV/9a5P5pcbY6rLf3SAnfz2iwuHTIK7afPSPY4IoJXWJ78WWmT/:S5a8YmDncVV/9a5P5pcbY6rzlfAuzb7+
TLSH
FB7402CF2D4A5819E42EE920599381C2C8D61DF9A8B56831FCCCB0EF17D72AC978C795
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS771fbbde14599e5fa882c7c63c43d4faT1027 · T1059.005
VBS771fbbde14599e5fa882c7c63c43d4fa.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
VBS771fbbde14599e5fa882c7c63c43d4faT1027 · T1059.005
VBS771fbbde14599e5fa882c7c63c43d4fa.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
771fbbde14599e5fa882c7c63c43d4fa
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account