Malicious
VBScript
MD5: 9949586cee507be52da22b942512b4d4
Size: 191.4 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 186.9 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- dac6df9a52043ed0c17b2fb158c9b9bafdd0c7b32282d457fe5539299b92c33d
- MD5
- 9949586cee507be52da22b942512b4d4
- Verdict
- Malicious
- File type
- VBScript · 186.9 KB
Cite this report: https://app.malva.re/sha256/dac6df9a52043ed0c17b2fb158c9b9bafdd0c7b32282d457fe5539299b92c33d
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
191.4 KB · 191,404 B
First seen
2026-10-29 07:15 · an hour ago
Last seen
2026-10-29 07:15 · an hour ago
Last analysis
2026-10-29 08:00 · an hour ago
Hashes
MD5
9949586cee507be52da22b942512b4d4
Sha1
70eaf6a4e4ad071940d22d76f20a93e0870ce0d1
Sha256
dac6df9a52043ed0c17b2fb158c9b9bafdd0c7b32282d457fe5539299b92c33d
Sha384
eb6d9e2d439a972d61d9e6e33c273d7f9d987abfa53d0bc9e59ae6442d5650b52feea94ec06c4921cc79e877da059bc6
Sha512
4d42366a5ae6b4dc822034c92832dd65310fbf7ef6d2cd44fa6dd52551763af10d817306ff411eeba8b9c9441bac1d10de0fba1323d67f9857cb7c1e84ac7b47
SSDeep
3072:kkLEWEwyxnU2gAGDLauPCqLqNX2eA6v4hFuI73Wm0eAqKW+UtCrZ6bZJoT:kK4rdZgDLa0CqLql3AT8s3x5AqKXiCAW
TLSH
A514F1811D463F73C2C024AD1F87913F571E14D6A32DB697FD9B28958ABB0A32ED62D0
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBS9949586cee507be52da22b942512b4d4T1027 · T1059.005
VBS9949586cee507be52da22b942512b4d4.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential