Malicious
Malicious

91304dc090824507eda91ba9c07b5ec8

VBScript
MD5: 91304dc090824507eda91ba9c07b5ec8
Size: 19.32 KB
text/vbscript

This sample is a 18.9 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
b88183602e79d3b8269b6ced8aae98590373dbe7740d910bc3405c74b48f437b
MD5
91304dc090824507eda91ba9c07b5ec8
Verdict
Malicious
File type
VBScript · 18.9 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/b88183602e79d3b8269b6ced8aae98590373dbe7740d910bc3405c74b48f437b

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
19.32 KB · 19,322 B
First seen
2026-09-24 05:45 · one month ago
Last seen
2026-09-24 05:45 · one month ago
Last analysis
2026-09-24 05:45 · one month ago
Hashes
MD5 91304dc090824507eda91ba9c07b5ec8 Sha1 68194f88347c7e22247a5618c267b7de1b34d720 Sha256 b88183602e79d3b8269b6ced8aae98590373dbe7740d910bc3405c74b48f437b Sha384 4cd3da39f1032ed54cfd24e4c0680cb21d7775b24ee047a0fa87ac145dc5020749e0acfef78078ce2d55117fb12e982a Sha512 0e3875fba2ed445b04a20f77e09927e473a4c59c4e87179811c2e822e55128b5c043ad332e1df31c4929f1171cc9c9e817375dd4df01bcb83d9b07608747046c SSDeep 384:gI7KjDVNBCFjGffO/MUuS7WAVrJlPhw3jwxBIwgnx:gI+jLBqGffYtpWAVFDwcxl4x TLSH EF82A69DCF2D13CC6B16DE615DFA6C24907747E60065147439FABB3C2C82B7AE239846
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBS91304dc090824507eda91ba9c07b5ec8
VBS91304dc090824507eda91ba9c07b5ec8.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS91304dc090824507eda91ba9c07b5ec8
VBS91304dc090824507eda91ba9c07b5ec8.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 3huhuhuhuhuhuhuhuhuhuhu
91304dc090824507eda91ba9c07b5ec8
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙