Sign up free
Malicious
Malicious

8b963bed9a41c05522ad319e404bab7c

Share on LinkedIn
Print
VBScript
MD5: 8b963bed9a41c05522ad319e404bab7c
Size: 681.76 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 665.8 KB VBScript. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.

SHA256
d2fff8c0e8477cc2d5228644cecc2b0b41dbd02d2cb560b2d4be7be05535462f
MD5
8b963bed9a41c05522ad319e404bab7c
Verdict
No known threat found
File type
VBScript · 665.8 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/d2fff8c0e8477cc2d5228644cecc2b0b41dbd02d2cb560b2d4be7be05535462f

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
681.76 KB · 681,764 B
First seen
2026-11-03 07:31 · 9 hours ago
Last seen
2026-11-03 07:31 · 9 hours ago
Last analysis
2026-11-03 07:31 · 9 hours ago
Hashes
MD5 8b963bed9a41c05522ad319e404bab7c Sha1 04f21855eb221c6837aac3a8cb1f9e362c008fe0 Sha256 d2fff8c0e8477cc2d5228644cecc2b0b41dbd02d2cb560b2d4be7be05535462f Sha384 66529a52acf6e52e48b4a30cac93f8bbc8c9979bc3faf1380eb7521c6228ca2a92857ac10f007859f3c241f44c453a5d Sha512 433a8a37b594b03c3dac35eec5f3e4c3c8a7b2d91bbab925a173679e98ecaf8fa330a9e46d9b4867bc720be48a0c0920eecbf5568a94024314c96d79ac9f851b SSDeep 12288:ZBhXF7Tzl9E/VU00f28DBZec3vMHHAmJEQXWJ4XTafjAoPHhtUOkdPl:Gk20Z/vSAgmJ4XTaMorU7v TLSH 38E42287C6CC9535953E4F4759D2548FDED358F200A119A0BDDCA0BC2B2A8990ADFFE2
Detection
Symbol obfuscation
Low

3 malicious · 3 files
VBS8b963bed9a41c05522ad319e404bab7c
VBS8b963bed9a41c05522ad319e404bab7c.deobfuscated.vbs
BIN.executed
VBS.subscript.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙