Malicious
Malicious

8cbea655db829eab68beb9ad9f4c6d96

VBScript
MD5: 8cbea655db829eab68beb9ad9f4c6d96
Size: 514.68 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 502.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5
MD5
8cbea655db829eab68beb9ad9f4c6d96
Verdict
Malicious
File type
VBScript · 502.6 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
514.68 KB · 514,680 B
First seen
2026-10-28 10:45 · 4 days ago
Last seen
2026-10-28 10:45 · 4 days ago
Last analysis
2026-10-28 10:46 · 4 days ago
Hashes
MD5 8cbea655db829eab68beb9ad9f4c6d96 Sha1 b9ae44ddc9e2c5f51d5c8ada13916e396fbbe5ba Sha256 f8cd222ed4a2bb8cf4d668efeec0b8e813cbac807b4c70f6cee7b6e90e43e9e5 Sha384 8280aada698d7088725e084292df5b6bc15a3990ab63a58ddfaae268024d2b82cb39c06f209377aefc396f56f7d6cab6 Sha512 c6958404585e5e1accbe8c72d96ea9cb2ff9a7773e81aa5c883555019f54eeea57c8a4662e152914e519c0259064e76f5694b74816151ad0ad713bfaf7c14dbb SSDeep 12288:Ehhb+P2hNT0eEf0jraBjBKQOvsE1YcFAQ9Ki2Ix96kAGQE:ELb+eL0eyAkjvWsSLFAQwRCME TLSH 91B423812810562632EB5D556F90ED4FD10467E1F27E7031ECEFA86212B167E7EFB884
Detection
Symbol obfuscation
Low

1 malicious · 2 files
VBS8cbea655db829eab68beb9ad9f4c6d96
VBS8cbea655db829eab68beb9ad9f4c6d96.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
technique1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

1 malicious · 2 files
VBS8cbea655db829eab68beb9ad9f4c6d96
VBS8cbea655db829eab68beb9ad9f4c6d96.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
8cbea655db829eab68beb9ad9f4c6d96
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙