Malicious
Malicious

a800090d8b84e5cd47405a84771a2c38

Share on LinkedIn
Print
VBScript
MD5: a800090d8b84e5cd47405a84771a2c38
Size: 234.79 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan

This sample is a 229.3 KB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
bfb17099b1303d2ae7df74739494e3fd74253543d31a6f23d8375244c63df06a
MD5
a800090d8b84e5cd47405a84771a2c38
Verdict
Malicious
File type
VBScript · 229.3 KB
MITRE ATT&CK
T1027T1059.005

Cite this report: https://app.malva.re/sha256/bfb17099b1303d2ae7df74739494e3fd74253543d31a6f23d8375244c63df06a

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
234.79 KB · 234,790 B
First seen
2026-10-23 12:30 · 2 days ago
Last seen
2026-10-23 12:30 · 2 days ago
Last analysis
2026-10-23 12:30 · 2 days ago
Hashes
MD5 a800090d8b84e5cd47405a84771a2c38 Sha1 9b309ed64a2fd57d1953d5a1db1d382ea2075feb Sha256 bfb17099b1303d2ae7df74739494e3fd74253543d31a6f23d8375244c63df06a Sha384 caf9aab313adb09b42193fd78a1155e1e8329c601a0d42ba2cef9587e5ef19d4cc61ec0effb098aff8540860e9b9aa46 Sha512 9c96039f695374b79cdf9434464bcfff52a3a075190fa9363782d33b28226c171076153567b4594a31000d08068f284257852c7614c145a4c120e83b67a65525 SSDeep 6144:eVdzBMWdrHGsoosiKvJ9FlUK33vezZz5JlQ/TAtvu4HJJ6:wda8r7sdJBN33UPkU5J6 TLSH 66344B30ED2406694F471BAAFC950B62CABC860A462650F5FEDD034E61065FCE3FE66D
Detection
Symbol obfuscation
Medium

2 malicious · 2 files
VBSa800090d8b84e5cd47405a84771a2c38
VBSa800090d8b84e5cd47405a84771a2c38.deobfuscated.vbs
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path scr:vbs~T1027~T1059.005
Shape scr:vbs
malicious 1 nodes

Trace COM ordonnée UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential

An error has occurred. This application may no longer respond until reloaded. Reload 🗙