Suspicious
Suspect

9c4f86582a8186f10f9c33a712f38c4c

Share on LinkedIn
Print
VBScript
MD5: 9c4f86582a8186f10f9c33a712f38c4c
Size: 525.82 KB
text/vbscript

This sample is a 513.5 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 6 embedded or derived files. It matches 1 YARA rule. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
73cf7a19f52f55576d231f352d25e8747c4b73a10d58438285e09805f416e013
MD5
9c4f86582a8186f10f9c33a712f38c4c
Verdict
Inconclusive
File type
VBScript · 513.5 KB

Cite this report: https://app.malva.re/sha256/73cf7a19f52f55576d231f352d25e8747c4b73a10d58438285e09805f416e013

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
525.82 KB · 525,824 B
First seen
2026-09-12 14:30 · one month ago
Last seen
2026-09-12 14:30 · one month ago
Last analysis
2026-09-12 14:30 · one month ago
Hashes
MD5 9c4f86582a8186f10f9c33a712f38c4c Sha1 94f308176850207d1b127afd72f02ce2ac09ad4a Sha256 73cf7a19f52f55576d231f352d25e8747c4b73a10d58438285e09805f416e013 Sha384 4f2e78f9fc72be9000cf54b1347888d82493c62aec838ab88d919eab0d55fc42146871c41c6b9d9ae52fa522f714183d Sha512 394b72be4bc3fb2984eff7eb8606fe9c0aed2a57de48cadaabe293a3700c57949a18a6b8dabaf31fb622642bd68d92e59430be868e2f701bf6886106ab7ef876 SSDeep 12288:llQAiR49ckiK7JV8AuE4lKC/kPHM9/IsPZSSj/:ll0GcNUJV8i4mHM9/DZ7 TLSH 67B4AF02B6F2C0B2DA7664300936E735DEBC7C31183699AB63D61D5BBD30151DB39AB2
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLVC8 -> Microsoft Corporation

7 files
VBS9c4f86582a8186f10f9c33a712f38c4c
Structure
STICH beta

No STICH Path has been generated for this analysis yet.

1 structural branch were classified as secondary (decorative or non-determinant content) and did not produce a fingerprint.

bin 1

Name Value
Info
PDB Path: t$di

An error has occurred. This application may no longer respond until reloaded. Reload 🗙