Malicious
aa095631866a279861c0013f2fb6836b
VBScript
MD5: aa095631866a279861c0013f2fb6836b
Size: 8.94 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 8.7 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 236ae97e52af5482c7ce492efaee3543cc5cbd6f2fa352bc158e7a311d91bf9c
- MD5
- aa095631866a279861c0013f2fb6836b
- Verdict
- Malicious
- File type
- VBScript · 8.7 KB
Cite this report: https://app.malva.re/sha256/236ae97e52af5482c7ce492efaee3543cc5cbd6f2fa352bc158e7a311d91bf9c
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
8.94 KB · 8,935 B
First seen
2026-11-02 06:30 · 3 hours ago
Last seen
2026-11-02 06:30 · 3 hours ago
Last analysis
2026-11-02 06:30 · 3 hours ago
Hashes
MD5
aa095631866a279861c0013f2fb6836b
Sha1
ac62521b652b6c36c17934dc2705679dc39a7deb
Sha256
236ae97e52af5482c7ce492efaee3543cc5cbd6f2fa352bc158e7a311d91bf9c
Sha384
8b22a8820a554db7bde327a0afdaa574ee896632c4dd0ee66c32b3b591cd1bf58490c4a74cf59f18a23b766c4a49e6cd
Sha512
ae2cba5598bbb72a66c142b26c13b2d7be3bdb3f737c94b693faf09a827f09bdf3296dcbdf52dc5c57e19c12088fa59bbe862680dd7c4e740bca92740a6a4c85
SSDeep
192:coplSd64K9JwFnwZ7JL+RzwhBRsEcsdQ7:co3bxZ7JLSwhBKdF
TLSH
9F02627B4C16A0B2EE72199C576E0692E33181AF4E93C5117ACC93F66F1A83C618F7D4
1 malicious · 2 files
VBSaa095631866a279861c0013f2fb6836bT1027 · T1059.005
VBSaa095631866a279861c0013f2fb6836b.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
technique1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhu
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential1 malicious · 2 files
VBSaa095631866a279861c0013f2fb6836bT1027 · T1059.005
VBSaa095631866a279861c0013f2fb6836b.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 5huhuhuhuhuhuhuhuhuhuhu
aa095631866a279861c0013f2fb6836b
URLs in VB Code - #1
URIsuspect
https:huhuhuhuhuhuhu
aa095631866a279861c0013f2fb6836b
URLs in VB Code - #2
URIsuspect
https:huhuhuhuhuhuhuhuhuhuhu
aa095631866a279861c0013f2fb6836b
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account