Malicious
VBScript
MD5: 7f26cbb9e9ac0e25eea59c1f3e77d916
Size: 86.97 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 84.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 17be0e7d8d2362ebe651794ca504c2eb8b162bad6f56182ca77e275ea7768217
- MD5
- 7f26cbb9e9ac0e25eea59c1f3e77d916
- Verdict
- Malicious
- File type
- VBScript · 84.9 KB
Cite this report: https://app.malva.re/sha256/17be0e7d8d2362ebe651794ca504c2eb8b162bad6f56182ca77e275ea7768217
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
86.97 KB · 86,969 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
7f26cbb9e9ac0e25eea59c1f3e77d916
Sha1
2d7a115f845d6af19f9fd0e4d2aca978a2ef7010
Sha256
17be0e7d8d2362ebe651794ca504c2eb8b162bad6f56182ca77e275ea7768217
Sha384
031ddb7db57eada40d0e8a17df45f7b3bf89298881b2206aa8589bc2f387d347d598212221da6f926ee39c72bf73321a
Sha512
2904cda7d8704807f3c2052546a63f3ed456224207e76579caa3e3760250f68131c61bc6fe5f0711fa24e03ee23d5d98fd3527343afbdb961ef7fd41dbe7b93a
SSDeep
768:h3I7Ex5/qzy55LcyQzzX/zlKo5lX0pIQH1h8G7XfP1J5kvryu2pjI/XsidfuQbmD:h3Nxsy/ZWJh5lEpdAyuGv8kyFq4IHzHV
TLSH
0983A02C99C3E3148B27D25DA848C77F8A770DC19B21C06BEFAB6749300615E926BD7D
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS7f26cbb9e9ac0e25eea59c1f3e77d916T1027 · T1059.005
VBS7f26cbb9e9ac0e25eea59c1f3e77d916.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential