Malicious
VBScript
MD5: 931b101180c11aee744db6995dd13459
Size: 135.57 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 132.4 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
- MD5
- 931b101180c11aee744db6995dd13459
- Verdict
- Malicious
- File type
- VBScript · 132.4 KB
Cite this report: https://app.malva.re/sha256/bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
135.57 KB · 135,574 B
First seen
2026-10-28 11:00 · 12 minutes ago
Last seen
2026-10-28 11:00 · 12 minutes ago
Last analysis
2026-10-28 11:01 · 12 minutes ago
Hashes
MD5
931b101180c11aee744db6995dd13459
Sha1
f1faf78c8c0e3085742db804a290a7baf104cb2d
Sha256
bd030a5b82262d0573485a6d934b8c7643f3b7b2e1ed58c4823fdcacddef540d
Sha384
6a63389ac65a3e33fa0ede7febf67f2ef615d5bb07bc9659f26de287862cb4b381e03bc51af8fbd769bcbd2b7083e5ce
Sha512
4d11e329ce346ad6ceb802dab6d9bae7ef28b62ced1367dc5b4e8ab80be8b121f2ab07696ad9ab4a474f13e25b781e1f3f050679db24fea6322f04d62ab6be41
SSDeep
1536:MIvjWdfiqUc4VJCbKPZ1aqrnm5CayP67i60ebfcBIcoSRWiXuFCwfUgpMsq90yTS:BvjWdqN3PZ1lnmtfynoSpXuF9UWc9IXR
TLSH
C6D3F92F99CC61350F4E069AEFC8E553827CB71F232D409CD65B969D2033B98977AB24
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS931b101180c11aee744db6995dd13459T1027 · T1059.005
VBS931b101180c11aee744db6995dd13459.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential