Malicious
VBScript
MD5: 771fbbde14599e5fa882c7c63c43d4fa
Size: 338.65 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 330.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
- MD5
- 771fbbde14599e5fa882c7c63c43d4fa
- Verdict
- Malicious
- File type
- VBScript · 330.7 KB
Cite this report: https://app.malva.re/sha256/507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
338.65 KB · 338,653 B
First seen
2026-11-04 11:00 · an hour ago
Last seen
2026-11-04 11:00 · an hour ago
Last analysis
2026-11-04 11:01 · an hour ago
Hashes
MD5
771fbbde14599e5fa882c7c63c43d4fa
Sha1
e519f79876f5203baa0b4b81d76b94a44c52db14
Sha256
507a34df77b9b06d0f795e0137a314e198f1630d68637dbfc8595e28779cc9dc
Sha384
a7cffe8987e7135662ad9ec0bec0713da242e00eec9d2d8b6c2deaa4836bc6dcfa884daf7706e3448fb2e0f81b616622
Sha512
c4801ef62fba35d7c30bb54fdf691f1117821b4d06113856139f83d42e5008c61ffcdabf6882196b33028a82399ae39daf6957defd88ea3834dce6afe560c892
SSDeep
6144:S5a8YLS4CNJdcVV/9a5P5pcbY6rLf3SAnfz2iwuHTIK7afPSPY4IoJXWJ78WWmT/:S5a8YmDncVV/9a5P5pcbY6rzlfAuzb7+
TLSH
FB7402CF2D4A5819E42EE920599381C2C8D61DF9A8B56831FCCCB0EF17D72AC978C795
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS771fbbde14599e5fa882c7c63c43d4faT1027 · T1059.005
VBS771fbbde14599e5fa882c7c63c43d4fa.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential