Sign up free
Malicious
Malicious

81485c2bf645f1b65ba67ab3698d8739

Share on LinkedIn
Print
VBScript
MD5: 81485c2bf645f1b65ba67ab3698d8739
Size: 61.6 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 60.2 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 7 embedded or derived files. It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f6c8bd4739137e244c1bd61ab00c9313daae654b2bbd5b47df6585dbd2c352b3
MD5
81485c2bf645f1b65ba67ab3698d8739
Verdict
Malicious
File type
VBScript · 60.2 KB

Cite this report: https://app.malva.re/sha256/f6c8bd4739137e244c1bd61ab00c9313daae654b2bbd5b47df6585dbd2c352b3

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
61.6 KB · 61,595 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5 81485c2bf645f1b65ba67ab3698d8739 Sha1 c76ba983b7d7b3d12cead070aaeb7ddaca25d8ed Sha256 f6c8bd4739137e244c1bd61ab00c9313daae654b2bbd5b47df6585dbd2c352b3 Sha384 838873134425b34b2e95c3a7c24c412f728508e8880eb3cb74c28b3e1e707c9b40824bd068c2477dafe3157e399a982a Sha512 0fb3931beaaaeb70a3fb5cbce67e8c56612906b3aad8e73983d2eaa70f265ab771066fe8bc77c66b3e1848f8aec3493e25d7a2dc1c28a2b9cda8cea4589aa1a3 SSDeep 768:csVx4JmECev2qaNhZLkUsCjK11tydoMO8kuX438889arqgzepeq/1+17B2QX:csbAlfETFjKAxkT/pGgzbq/1iBdX TLSH 66539052E934791C0A461B5F98454D9389B4C13523D360F069B8FB2B522EBCAAB3FF47
Detection
Symbol obfuscation
Medium

5 malicious · 6 files
VBS81485c2bf645f1b65ba67ab3698d8739
VBS81485c2bf645f1b65ba67ab3698d8739.deobfuscated.vbs
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
BIN[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1
malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙