Malicious
a7d7f2022849581357b3362465407b96
VBScript
MD5: a7d7f2022849581357b3362465407b96
Size: 74.39 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 72.6 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- a36c4517fd6073d0586f27accc2634c77cf362c4379a8bc27a89074223026dd2
- MD5
- a7d7f2022849581357b3362465407b96
- Verdict
- Malicious
- File type
- VBScript · 72.6 KB
Cite this report: https://app.malva.re/sha256/a36c4517fd6073d0586f27accc2634c77cf362c4379a8bc27a89074223026dd2
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.39 KB · 74,386 B
First seen
2026-10-26 10:45 · 2 hours ago
Last seen
2026-10-26 10:45 · 2 hours ago
Last analysis
2026-10-26 10:45 · 2 hours ago
Hashes
MD5
a7d7f2022849581357b3362465407b96
Sha1
d29dfe04113ee3aa424bc73988b06edfe772c084
Sha256
a36c4517fd6073d0586f27accc2634c77cf362c4379a8bc27a89074223026dd2
Sha384
b76120ff4cf95b83b45ae5cbf0bd9dac6528c5181b1b23d8389cc42726f0ccac851392f5c8fa5288b8373a2c3f31c1e3
Sha512
fc93d0fe496de0f4e2c21a228d2f1bdd3457f6048f4728d7abeb69c47485230589250f5c4ef25942eb62c06745a73787c475ffbe93689f9a52c934aaf732e9b5
SSDeep
1536:zo3k2Av7mJQwf/yvdI0z952tHT7xSXvYO0WMDxUzgl+Az3G:zckU6a/yy0z95CT7xyvYOQDCzgl+eW
TLSH
1B737D70EE54021A0E0B27AAFD995A61C9BC8215421350F5FED9270EA107DECF3FE66D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBSa7d7f2022849581357b3362465407b96T1027 · T1059.005
VBSa7d7f2022849581357b3362465407b96.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
3 malicious · 3 files
VBSa7d7f2022849581357b3362465407b96T1027 · T1059.005
VBSa7d7f2022849581357b3362465407b96.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
No malware configuration was found at this point.
Sign in or create a free account to view the matching YARA rules.
Create a free account