Malicious
a2ad9b4fd62d8065d12de29ade644f83
VBScript
MD5: a2ad9b4fd62d8065d12de29ade644f83
Size: 208.08 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 203.2 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 1b3733f060fa5ca240f2b9b5e5a33b4b970a42888efddcbecf1b3bb4cf4fee07
- MD5
- a2ad9b4fd62d8065d12de29ade644f83
- Verdict
- Malicious
- File type
- VBScript · 203.2 KB
Cite this report: https://app.malva.re/sha256/1b3733f060fa5ca240f2b9b5e5a33b4b970a42888efddcbecf1b3bb4cf4fee07
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
208.08 KB · 208,084 B
Hashes
MD5
a2ad9b4fd62d8065d12de29ade644f83
Sha1
23aed203ed5cc685c985040fa1dde371716fb786
Sha256
1b3733f060fa5ca240f2b9b5e5a33b4b970a42888efddcbecf1b3bb4cf4fee07
Sha384
75727c25bfd46c64841f51aae9e84e7c98887f05da407a22c9c7e1113082a7deb4cfaaf79dac52cac8b12a1d0786c760
Sha512
78ca74837a39a645b82f4407334d27f0b586f2e7a33fe130af776e1424e6c1bbfe00e61fcc914dc3eda0045e04c2f65aa20c1d6fc932debbb11df72058869258
SSDeep
3072:VGWAY6eRDA84f8aWSOqrFJ8sGiFpj1UO17EDCCRgPBWIpYWvaoz/:VG1IRE84fJcqTt+k+CC+oIpYCnz/
TLSH
B814F1C1BD9132C7D6C528CD5E54C41F438CA0D6AB2EB285FF8F812147BA2A79AF14D6
Detection
Symbol obfuscation
Low
1 malicious · 2 files
VBSa2ad9b4fd62d8065d12de29ade644f83T1027 · T1059.005
VBSa2ad9b4fd62d8065d12de29ade644f83.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBSa2ad9b4fd62d8065d12de29ade644f83T1027 · T1059.005
VBSa2ad9b4fd62d8065d12de29ade644f83.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 2huhuhuhuhuhuhuhuhuhuhu
a2ad9b4fd62d8065d12de29ade644f83
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account