Malicious
VBScript
MD5: 7d4bf313ceb8ee972cbdfbf47f13ec49
Size: 217.1 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 212 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- d419684ee65bedbbcfbab3cf63784f4b6728da2de7eed011faefa12ca7589e57
- MD5
- 7d4bf313ceb8ee972cbdfbf47f13ec49
- Verdict
- Malicious
- File type
- VBScript · 212 KB
Cite this report: https://app.malva.re/sha256/d419684ee65bedbbcfbab3cf63784f4b6728da2de7eed011faefa12ca7589e57
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
217.1 KB · 217,096 B
First seen
2026-10-29 14:00 · yesterday
Last seen
2026-10-29 14:00 · yesterday
Last analysis
2026-10-29 22:47 · 18 hours ago
Hashes
MD5
7d4bf313ceb8ee972cbdfbf47f13ec49
Sha1
2c85bf6e9403853af9ae2c717447b2645b0d0306
Sha256
d419684ee65bedbbcfbab3cf63784f4b6728da2de7eed011faefa12ca7589e57
Sha384
804c3ea8b817b20cd8253519a15285b47564c0b56139de6988524c3b8b9509e07e013b1f25bc9b4165dc5ab5b847f228
Sha512
dadc6d92827fa725676f008f5110bd27103411a0ae8b368c21c4a8e655ac90cbe6ba07b5d07f5d1d83d6f780953cd4dc823f669913f9c3ac31f15ee576fa58be
SSDeep
3072:+koHP/qDC87QU+VIlr9xWhnwoxno86PlqbfGJDGsbjj3gGdQ8+IV6cfQd+5tdJT6:AP/qDAUoIAnw0op6cfbjj3fV6KQ4D6
TLSH
6224F1C508597F1BC6D6A3AE5952C83F4B58128BEB2CB20D3D2F525906FB1668FC13C9
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS7d4bf313ceb8ee972cbdfbf47f13ec49T1027 · T1059.005
VBS7d4bf313ceb8ee972cbdfbf47f13ec49.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential