Malicious
99abaf531709ff89d4887a4560603352
VBScript
MD5: 99abaf531709ff89d4887a4560603352
Size: 30.52 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 29.8 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a5f26905d81e65c2de5579f0a2c8ff83c3cd4649eff015387d2ddf148b46a4c6
- MD5
- 99abaf531709ff89d4887a4560603352
- Verdict
- Malicious
- File type
- VBScript · 29.8 KB
Cite this report: https://app.malva.re/sha256/a5f26905d81e65c2de5579f0a2c8ff83c3cd4649eff015387d2ddf148b46a4c6
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
30.52 KB · 30,516 B
First seen
2026-10-26 07:46 · an hour ago
Last seen
2026-10-26 07:46 · an hour ago
Last analysis
2026-10-26 07:46 · an hour ago
Hashes
MD5
99abaf531709ff89d4887a4560603352
Sha1
29cdd8527db165bf63027aee90f707e3d98ad6ef
Sha256
a5f26905d81e65c2de5579f0a2c8ff83c3cd4649eff015387d2ddf148b46a4c6
Sha384
27c1491cd53d5086a1b0731b2227c7d0f66526c9a99b4790d21a1d5a1977fbe0884e26ca3ed31c2a08fb0a5e3d391601
Sha512
726646d0a164ccb3d383da3e0a697d087e8a24a47500237387a9c2191e9f9b126b6f9e70fc28ff6abdf5542529fe2cc6991ae9c1a4dacaf3d89d407558f3319b
SSDeep
768:KSObhOJnITHc0XODVkLEANEy5gJJAk3aG/SCthj0l0tBZzr8c:LihOJnsHcFDVkLEANEwgJJh3aGxy0Xuc
TLSH
EBD264178D068FF01C7A2756A57FA81DA920036678387D0E398FF15C3B3A625CBD16E6
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBS99abaf531709ff89d4887a4560603352T1027 · T1059 · T1059.005
VBS99abaf531709ff89d4887a4560603352.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS99abaf531709ff89d4887a4560603352T1027 · T1059 · T1059.005
VBS99abaf531709ff89d4887a4560603352.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
99abaf531709ff89d4887a4560603352
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account