Malicious
9f4fd058994a0f691ca5aabbfc5a458d
VBScript
MD5: 9f4fd058994a0f691ca5aabbfc5a458d
Size: 77.07 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 75.3 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
- MD5
- 9f4fd058994a0f691ca5aabbfc5a458d
- Verdict
- Malicious
- File type
- VBScript · 75.3 KB
Cite this report: https://app.malva.re/sha256/a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
77.07 KB · 77,072 B
First seen
2026-10-30 07:45 · 2 hours ago
Last seen
2026-10-30 07:45 · 2 hours ago
Last analysis
2026-10-30 07:45 · 2 hours ago
Hashes
MD5
9f4fd058994a0f691ca5aabbfc5a458d
Sha1
83a77d7cc057f6ec9d018c5a63cde184c0d03c87
Sha256
a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
Sha384
5929dcea89a83f884701f997b5a71a40157b8e5038c686968fb321df8130156198e0c361e8595eaff639907fc0569e8f
Sha512
d32943cb1dc6d822074fdcf82cce88230a23b63327f4f2bf7f2ea191bad1b09f7f40a49a3004d549dcdacbc2284e070fd8dcfc0539821f2367e1134dd6f83413
SSDeep
1536:55rP1JAVi+551LDkztmSFsYLTwnAnQoKB:55r1JAL555kzt/FsY/KAQx
TLSH
F673D42CBB1301C40A471799E8B5C95087ED3D3FE11230EAAB9BE2791033D6EEE79159
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS9f4fd058994a0f691ca5aabbfc5a458dT1027 · T1059.005
VBS9f4fd058994a0f691ca5aabbfc5a458d.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBS9f4fd058994a0f691ca5aabbfc5a458dT1027 · T1059.005
VBS9f4fd058994a0f691ca5aabbfc5a458d.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
9f4fd058994a0f691ca5aabbfc5a458d
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account