Malicious
Malicious

9f1425948f5d1bdf8f56f8242f2b7ce2

VBScript
MD5: 9f1425948f5d1bdf8f56f8242f2b7ce2
Size: 47.12 KB
text/vbscript

This sample is a 46 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
243962c3e965fa6f4c96b5128db81e49123da3d49f6ca85cb4f14b9f3314a3ec
MD5
9f1425948f5d1bdf8f56f8242f2b7ce2
Verdict
Malicious
File type
VBScript · 46 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/243962c3e965fa6f4c96b5128db81e49123da3d49f6ca85cb4f14b9f3314a3ec

Ctrl + scroll to zoom · drag to pan

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
47.12 KB · 47,118 B
First seen
2026-09-23 08:45 · one month ago
Last seen
2026-09-23 08:45 · one month ago
Last analysis
2026-09-23 08:45 · one month ago
Hashes
MD5 9f1425948f5d1bdf8f56f8242f2b7ce2 Sha1 3d7d2dfc71e67148b86bce1764e386a76aae253e Sha256 243962c3e965fa6f4c96b5128db81e49123da3d49f6ca85cb4f14b9f3314a3ec Sha384 16a8f066cd72d6f37892da620b36658d38d0fe23aa422fe05e36d0cdb6b5745a1608200790aedc4da1551aa5a946c3c9 Sha512 b5f70c69e02865a0293c5d235949c76c5c944a33749f1b251e72f4ed04f6e196a533ae2ff2c2325c89225ca34193a4fef5f31b7669b01f879198482e453ed7ed SSDeep 768:Te2w/nIYzsmIgXgaNiulfLl3HHONu6O450i06P+302y/aPtF5SW9ycz4:Te2w/xrgLMDFR45w62TD5SWj4 TLSH 3E236D71DA28021B8D4A2759FC856D82EABCDE15462350A5FDF8070E7007D9EE3BE32D
Detection
Symbol obfuscation
Low

2 malicious · 2 files
VBS9f1425948f5d1bdf8f56f8242f2b7ce2
VBS9f1425948f5d1bdf8f56f8242f2b7ce2.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

2 malicious · 2 files
VBS9f1425948f5d1bdf8f56f8242f2b7ce2
VBS9f1425948f5d1bdf8f56f8242f2b7ce2.deobfuscated.vbs
No malware configuration was found at this point.

Trace COM ordonnée UNKNWOWNmalicious
line 8huhuhuhuhuhuhuhuhuhuhu
9f1425948f5d1bdf8f56f8242f2b7ce2
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential
Sign in or create a free account to view the matching YARA rules. Create a free account
An error has occurred. This application may no longer respond until reloaded. Reload 🗙