Malicious
931b101180c11aee744db6995dd13459
VBScript
MD5: 931b101180c11aee744db6995dd13459
Size: 135.57 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 132.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
- MD5
- 931b101180c11aee744db6995dd13459
- Verdict
- Malicious
- File type
- VBScript · 132.4 KB
Cite this report: https://app.malva.re/sha256/bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
135.57 KB · 135,574 B
First seen
2026-10-28 11:00 · 21 minutes ago
Last seen
2026-10-28 11:00 · 21 minutes ago
Last analysis
2026-10-28 11:01 · 20 minutes ago
Hashes
MD5
931b101180c11aee744db6995dd13459
Sha1
f1faf78c8c0e3085742db804a290a7baf104cb2d
Sha256
bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
Sha384
6a63389ac65a3e33fa0ede7febf67f2ef615d5bb07bc9659f26de287862cb4b381e03bc51af8fbd769bcbd2b7083e5ce
Sha512
4d11e329ce346ad6ceb802dab6d9bae7ef28b62ced1367dc5b4e8ab80be8b121f2ab07696ad9ab4a474f13e25b781e1f3f050679db24fea6322f04d62ab6be41
SSDeep
1536:MIvjWdfiqUc4VJCbKPZ1aqrnm5CayP67i60ebfcBIcoSRWiXuFCwfUgpMsq90yTS:BvjWdqN3PZ1lnmtfynoSpXuF9UWc9IXR
TLSH
C6D3F92F99CC61350F4E069AEFC8E553827CB71F232D409CD65B969D2033B98977AB24
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS931b101180c11aee744db6995dd13459T1027 · T1059.005
VBS931b101180c11aee744db6995dd13459.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS931b101180c11aee744db6995dd13459T1027 · T1059.005
VBS931b101180c11aee744db6995dd13459.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
931b101180c11aee744db6995dd13459
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account