Sign up free
Malicious
Malicious

8b53b312189fd0377e2d8fb785fded1e

Share on LinkedIn
Print
VBScript
MD5: 8b53b312189fd0377e2d8fb785fded1e
Size: 71.21 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 69.5 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 9 embedded or derived files. It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
bd6e23efa4fd801f9063465c393752d7f690731df6bce8232ae31699aeef19cf
MD5
8b53b312189fd0377e2d8fb785fded1e
Verdict
Malicious
File type
VBScript · 69.5 KB

Cite this report: https://app.malva.re/sha256/bd6e23efa4fd801f9063465c393752d7f690731df6bce8232ae31699aeef19cf

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
71.21 KB · 71,210 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5 8b53b312189fd0377e2d8fb785fded1e Sha1 5f7415c2d53f23d2cd3342abe0eed0155c808673 Sha256 bd6e23efa4fd801f9063465c393752d7f690731df6bce8232ae31699aeef19cf Sha384 7f0aa116bfd575fbcea0e56d9a53560cc3dccca04e2f20bb53fe3066949776008d524d74e29e81af88258347aa095a51 Sha512 73270791af983c252cb542acdcf6e309879cc4566b63c47b06d19d5a0cc0a932e03950d62d564d5b937359686f04427960d88cb6f3f1b101b6401396f7011a45 SSDeep 768:cshx4mJjj//ob419kpfI1t/IO07wY8IlbzJLbd5PESfdGM0aaalswCDCsEY:csHfJjTPkfI1BIdx8IXpEZUCD7V TLSH E76391329A19321CA7671ED79C250515FC9562830B0360FC7BF46169D2B5BC8EAA8FCF
Detection
Symbol obfuscation
Medium

5 malicious · 6 files
VBS8b53b312189fd0377e2d8fb785fded1e
VBS8b53b312189fd0377e2d8fb785fded1e.deobfuscated.vbs
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
PS1[Deobfuscated PS]
BIN[Base64-Block]
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.001~T1059.005>scr:ps1~T1027~T1059.001
Shape scr:vbs>scr:ps1
malicious 2 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙