Malicious
VBScript
MD5: b0e76c6af632e260775478c8dded04cb
Size: 74.86 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 73.1 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 3 embedded or derived files. It matches 4 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- f6295d5359a1c9beae1f58f2e44e138b11a6b304a6b3940f330c575aa21fecf0
- MD5
- b0e76c6af632e260775478c8dded04cb
- Verdict
- Malicious
- File type
- VBScript · 73.1 KB
Cite this report: https://app.malva.re/sha256/f6295d5359a1c9beae1f58f2e44e138b11a6b304a6b3940f330c575aa21fecf0
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
74.86 KB · 74,857 B
First seen
2026-10-26 08:00 · 47 minutes ago
Last seen
2026-10-26 08:00 · 47 minutes ago
Last analysis
2026-10-26 08:00 · 47 minutes ago
Hashes
MD5
b0e76c6af632e260775478c8dded04cb
Sha1
c7d437f8a42230c493a3622a5d72316244a2d694
Sha256
f6295d5359a1c9beae1f58f2e44e138b11a6b304a6b3940f330c575aa21fecf0
Sha384
3abfa2e83e76e72d2e67f5fc25e564665008ea78e145ef8693d7228a34639f0837f9f2b58caab018f80b68d715a4ada0
Sha512
d1eb0241bf12cd98362cd5e24526dc54648943c34cf6232e48ec2a7a029366f720d4259aab0c00843faca68b07572bb0926e09e729d4b0155b247cacd8a91456
SSDeep
1536:zo3p2IwOMMKwLEINnGyaPqI0zqL59H0PSvIORONXpx7zgl+AzO9:zcpAgKwvNnGyaP0zqLT0PiIOQ5Rzgl+B
TLSH
F4736C70EE54061A0E0B37AAFD994A61C5BCC215062340F5FED9271DA107AECE3FE66D
Detection
Symbol obfuscation
Low
3 malicious · 3 files
VBSb0e76c6af632e260775478c8dded04cbT1027 · T1059.005
VBSb0e76c6af632e260775478c8dded04cb.deobfuscated.vbsT1059.005
BIN.executed
VBS.subscript.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes