Malicious
VBScript
MD5: 9f4fd058994a0f691ca5aabbfc5a458d
Size: 77.07 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 75.3 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
- MD5
- 9f4fd058994a0f691ca5aabbfc5a458d
- Verdict
- Malicious
- File type
- VBScript · 75.3 KB
Cite this report: https://app.malva.re/sha256/a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
77.07 KB · 77,072 B
First seen
2026-10-30 07:45 · an hour ago
Last seen
2026-10-30 07:45 · an hour ago
Last analysis
2026-10-30 07:45 · an hour ago
Hashes
MD5
9f4fd058994a0f691ca5aabbfc5a458d
Sha1
83a77d7cc057f6ec9d018c5a63cde184c0d03c87
Sha256
a141381bc8d5390e689e41fb2f9e9e34a333b453cc56d4b0f17f421ef4cbbeda
Sha384
5929dcea89a83f884701f997b5a71a40157b8e5038c686968fb321df8130156198e0c361e8595eaff639907fc0569e8f
Sha512
d32943cb1dc6d822074fdcf82cce88230a23b63327f4f2bf7f2ea191bad1b09f7f40a49a3004d549dcdacbc2284e070fd8dcfc0539821f2367e1134dd6f83413
SSDeep
1536:55rP1JAVi+551LDkztmSFsYLTwnAnQoKB:55r1JAL555kzt/FsY/KAQx
TLSH
F673D42CBB1301C40A471799E8B5C95087ED3D3FE11230EAAB9BE2791033D6EEE79159
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBS9f4fd058994a0f691ca5aabbfc5a458dT1027 · T1059.005
VBS9f4fd058994a0f691ca5aabbfc5a458d.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 7huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential