Malicious
8f6385f05c92312d54a97be51841d5fe
VBScript
MD5: 8f6385f05c92312d54a97be51841d5fe
Size: 793.21 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 774.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 2 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- bac20d91e107d5bbdc4215f8a90af56a9dc4a1195e083b43c374f549fad3a797
- MD5
- 8f6385f05c92312d54a97be51841d5fe
- Verdict
- Malicious
- File type
- VBScript · 774.6 KB
Cite this report: https://app.malva.re/sha256/bac20d91e107d5bbdc4215f8a90af56a9dc4a1195e083b43c374f549fad3a797
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
793.21 KB · 793,214 B
Hashes
MD5
8f6385f05c92312d54a97be51841d5fe
Sha1
9a05283850483085ab1a55facb9ec9bf2178da05
Sha256
bac20d91e107d5bbdc4215f8a90af56a9dc4a1195e083b43c374f549fad3a797
Sha384
1bddb9fd69fa8f01efc9969dee098231a6dcbd27978a3b02721649f5de29651ee7782e52d704c600c13cbb2e75afb394
Sha512
8656e11508be3c49669a7c87b5984c408fa2aa0685a7ebdbc8715d0b5ab30ecc816e37b08b1cfcbeef60f084e93e2b9325a45d1890064f8c7cb7f20efbc1cb54
SSDeep
24576:s9gpmZ3HcnAxgRnVfAb0nU1dMxlKTKQevkfDDI:s6gZ36AxgRFs0nUPMx0T2v08
TLSH
6BF4225786FC3B45AB2DA4B7446BD51A6091CCBE006A7DD27F8EF2592FC0A7C0378684
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBS8f6385f05c92312d54a97be51841d5feT1027 · T1059.005
VBS8f6385f05c92312d54a97be51841d5fe.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential3 malicious · 3 files
VBS8f6385f05c92312d54a97be51841d5feT1027 · T1059.005
VBS8f6385f05c92312d54a97be51841d5fe.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
8f6385f05c92312d54a97be51841d5fe
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account