Malicious
8332d874f338a0b883f58c763306944c
VBScript
MD5: 8332d874f338a0b883f58c763306944c
Size: 74.41 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 72.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 26c03e239c5307b179b22eb031cac2be44d61102e2c019c8c110c69b7b38d525
- MD5
- 8332d874f338a0b883f58c763306944c
- Verdict
- Malicious
- File type
- VBScript · 72.7 KB
Cite this report: https://app.malva.re/sha256/26c03e239c5307b179b22eb031cac2be44d61102e2c019c8c110c69b7b38d525
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.41 KB · 74,412 B
Hashes
MD5
8332d874f338a0b883f58c763306944c
Sha1
4d8f100eecce4c76a507efe386caa2c15fabd90e
Sha256
26c03e239c5307b179b22eb031cac2be44d61102e2c019c8c110c69b7b38d525
Sha384
c5f346bb427e164a8a692cc064836888afa768847ca874d78d18c8b5e267fd337cb80ea0436aa4fbc35fccecaf7aace7
Sha512
5841dc001674311223ca577476bce48de4178c3651d35e33503bd4a6852f9f23084e0eff298d326b0f2adfd53baaf876cd027dc5e4f5de21f6146537af9a8dc8
SSDeep
1536:zo3f2RJS3XpbcdyDhI0z9YSQHXwSBwOsGeOxBzgl+Azb0E9kv8:zcfQipAdyK0z9YjXwwwOYOfzgl+eZ9kU
TLSH
4D737D70EE14021A0E4B27EAFC995665C5BC8215022740F5FED9271EA107EECE7FE62D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS8332d874f338a0b883f58c763306944cT1027 · T1059.005
VBS8332d874f338a0b883f58c763306944c.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBS8332d874f338a0b883f58c763306944cT1027 · T1059.005
VBS8332d874f338a0b883f58c763306944c.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account