Malicious
VBScript
MD5: a8a4a2590ff8dc869f8d873ea39f4e58
Size: 7.72 MB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 7.4 MB VBScript identified by Malva.RE as Stealer Crypter (stealer loader). Static analysis extracted 6 embedded or derived files. It matches 6 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1027.001, T1055 and T1140. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803
- MD5
- a8a4a2590ff8dc869f8d873ea39f4e58
- Verdict
- Malicious
- File type
- VBScript · 7.4 MB
- Family
- Stealer Crypter
- Category
- Stealer Loader
Cite this report: https://app.malva.re/sha256/5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803
Related Stealer Crypter samples
- b1022d3e58a0318b52feb8aa8048376113ca7596830cb0da750c08f2c8ece583 2026-11-02
- 0086d2f0a06016855a3e583d436fe63e361c605b0a8780bd6e67a80564700e85 2026-10-31
- 876b1dbc4bcfc548d1fbf8ac8d4fe7dfa15df80e5085372397dffb814c5e5352 2026-10-30
- 0008c95fb43bd97dec04c408b61a66a38f59a7912e4d4a058647ef14407463f2 2026-10-30
- 9b228bf578fee16d5ccd880ecafcc7159d3678ef09d7fa5c807d423f97d48a9e 2026-10-30
- 2c496e41d45ee787edef9c8dec4fe59e68a0d99746c899a6aabc6cbb36419bd6 2026-10-30
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Size
7.72 MB · 7,716,864 B
First seen
2026-10-30 16:00 · 2 days ago
Last seen
2026-10-30 16:00 · 2 days ago
Last analysis
2026-10-30 16:00 · 2 days ago
Hashes
MD5
a8a4a2590ff8dc869f8d873ea39f4e58
Sha1
bd4f4976dc4355e4c05e2c4c5cb8ad8e48d88dc9
Sha256
5a39bd95d430a1093b3d179d100389ee2cf60226518b82e02572f3e25df2f803
Sha384
82ba5952fe5b95e4cdb84957a6797dc42f9b7c5c275f79453e7c26d304bf21e8a513efbe9f66a82d984a93b9ca4492b8
Sha512
fce4eb3a8d5409875e1ec11cadafb6d526a95d5d9013e2832ffae29262d7b723faf08d62e2f2575d15daa75183a0023001b1803acdc3dd2c4a102d214ab6ff6e
SSDeep
49152:Z9EFF1HYeUm4zXDR/9mvNLXeSLsh5xJe8+wQ7VrOQvnqhoh6zjjgMGaTMggfImu8:Zir1c/Uqt7c1XvqWhkMgKlTE
TLSH
FE764907ECA545E8C0AED1708667A153BF707C885B3127D71B90F6642F36BE0ADBA718
Detection
PeID
HQR data fileMicrosoft Visual C++ v6.0 DLLPrivate EXE Protector V2.30-V2.3X -> SetiSoft TeamtElock 1.0 (private) -> tE!tElock 1.0 (private) -> tE!
1 malicious · 7 files
VBSa8a4a2590ff8dc869f8d873ea39f4e58T1027 · T1055 · T1140Stealer Crypter
Structure
B64Base64-Block3
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
pe:exe~T1027~T1027.001~T1055~T1140>enc:b64
Shape
pe:exe>enc:b64
malicious
2 nodes
| Name | Value |
|---|---|
| Attribution | |