Malicious
VBScript
MD5: a5fcf7a0ab401f4bb979b2d27e6b9f2d
Size: 61.23 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 59.8 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 05c0ad67ef0c4dc71623241cdc222ab97da2b2ffda6a147f21f2e9664b06e953
- MD5
- a5fcf7a0ab401f4bb979b2d27e6b9f2d
- Verdict
- Malicious
- File type
- VBScript · 59.8 KB
Cite this report: https://app.malva.re/sha256/05c0ad67ef0c4dc71623241cdc222ab97da2b2ffda6a147f21f2e9664b06e953
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
61.23 KB · 61,231 B
First seen
2026-11-02 13:45 · 6 hours ago
Last seen
2026-11-02 13:45 · 6 hours ago
Last analysis
2026-11-02 13:46 · 6 hours ago
Hashes
MD5
a5fcf7a0ab401f4bb979b2d27e6b9f2d
Sha1
ca1ac3bf1c81ca42e52fcc9e226cb50c8a1aead1
Sha256
05c0ad67ef0c4dc71623241cdc222ab97da2b2ffda6a147f21f2e9664b06e953
Sha384
30504b43fb0b92b2a823eb8386133532bd87f927ee806dd7b1fb83bbe5f271b6f3dd21044e1094606591041802363b22
Sha512
6828e7d0e4d10704044f43ea84ff2fe13502c1702c31786b81429a25e37abb3a721c6f78bbf38fc1ccb273fa1bfe8d81fa004f7f10755ceba92283a88a72f164
SSDeep
768:csLmx4VnGfLkLU6DQvLZgYN8SuoLeBR2tktmkSuOx/+1qyLHweePQvs7PW:csqsnKLgDQTZfYoLeSGtEXqe2
TLSH
7D53B160AF213330094AD6AFBC49FD64E17661213133777CED98A2595C86E7CB6E870E
Detection
Symbol obfuscation
Medium
2 malicious · 2 files
VBSa5fcf7a0ab401f4bb979b2d27e6b9f2dT1027 · T1059.005
VBSa5fcf7a0ab401f4bb979b2d27e6b9f2d.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 6huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential