Malicious
VBScript
MD5: 8d8d36b527b0e955fbb375263c98f9b6
Size: 139.34 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 136.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- ff28c4650ff84394269d95fa2186c0b520873f532f44e2e7f6866fee3958608a
- MD5
- 8d8d36b527b0e955fbb375263c98f9b6
- Verdict
- Malicious
- File type
- VBScript · 136.1 KB
Cite this report: https://app.malva.re/sha256/ff28c4650ff84394269d95fa2186c0b520873f532f44e2e7f6866fee3958608a
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
139.34 KB · 139,340 B
First seen
2026-10-28 11:00 · 10 minutes ago
Last seen
2026-10-28 11:00 · 10 minutes ago
Last analysis
2026-10-28 11:01 · 10 minutes ago
Hashes
MD5
8d8d36b527b0e955fbb375263c98f9b6
Sha1
89e2ebbb63c845290a9d056fc972317110f42864
Sha256
ff28c4650ff84394269d95fa2186c0b520873f532f44e2e7f6866fee3958608a
Sha384
a65a43dce710765179956b92c65be419016c45cffa23086fa401e16852a2d4327e45cf3f04bea58848df9bcf4f76b485
Sha512
de50ff6fa967b8adec9b9bed70a2e86a3503e04102317b4a8c12ac751f6117a2b7dbbd68800ed24d236787b9685845dcc8240fdefe1dd2d81a2a835aa71a2e36
SSDeep
3072:hHZL2Q4cI7+sDZu95US2X65ST+iOYpcnn7:JZL2dRDEzL5SRmn7
TLSH
3FD3D916D5CC213F87418E6B6D3C0D9188BC41A46B224CAC777836E9C21997DFA79FAC
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS8d8d36b527b0e955fbb375263c98f9b6T1027 · T1059.005
VBS8d8d36b527b0e955fbb375263c98f9b6.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential