Malicious
b100d1af4f13a54120bcbd53fcf21563
VBScript
MD5: b100d1af4f13a54120bcbd53fcf21563
Size: 124.12 KB
text/vbscript
Ctrl + scroll to zoom · drag to pan
This sample is a 121.2 KB VBScript classified as malicious by Malva.RE. Static analysis extracted 1 embedded or derived file. It matches 2 YARA rules. Observed behaviours map to MITRE ATT&CK T1027 and T1059.005. The file was analysed statically: it was parsed and decompiled, never executed.
- SHA256
- 594c7c4c02a4362974d4137cdb56174ee9e4a9735ef55de2f4343eb21e2a8ffe
- MD5
- b100d1af4f13a54120bcbd53fcf21563
- Verdict
- Malicious
- File type
- VBScript · 121.2 KB
Cite this report: https://app.malva.re/sha256/594c7c4c02a4362974d4137cdb56174ee9e4a9735ef55de2f4343eb21e2a8ffe
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
VBScript file
Size
124.12 KB · 124,116 B
First seen
2026-10-28 11:00 · 22 minutes ago
Last seen
2026-10-28 11:00 · 22 minutes ago
Last analysis
2026-10-28 11:01 · 22 minutes ago
Hashes
MD5
b100d1af4f13a54120bcbd53fcf21563
Sha1
4b152433f1c1b33cd0dc0a737b8b4281523388cb
Sha256
594c7c4c02a4362974d4137cdb56174ee9e4a9735ef55de2f4343eb21e2a8ffe
Sha384
9f8ee486d9ce0561c4c909416f737b156029307a65d5a05b92059b97b30bd661631f051a25c5208cbc73f43a0ed1a138
Sha512
bdb364d7590be120dea3646f0cc7bb877f6a19d338f89c39b42cf88f1fd819f97e67c516ba2a662276f813c6a6999e8c7485c1cef7b0972633ba57d9ea8cdf97
SSDeep
3072:91J/J1GGtsU2a2P1QZjSTX6z8m13bwcA8:fJ/PGOx2+kGzDwct
TLSH
E6C3D432DDFE063E0A5627DDE9C8055587B88D15C332E3ECE5991E1D32025E89BFA239
Detection
Symbol obfuscation
Low
2 malicious · 2 files
VBSb100d1af4f13a54120bcbd53fcf21563T1027 · T1059.005
VBSb100d1af4f13a54120bcbd53fcf21563.deobfuscated.vbsT1059.005
STICH
beta
Structural Threat Infection Chain Hash
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
STICH Path = the fingerprint (canonical chain with techniques)
STICH Shape = structure only
Only determinant branches produce STICH Paths.
Path
scr:vbs~T1027~T1059.005
Shape
scr:vbs
malicious
1 nodes
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential2 malicious · 2 files
VBSb100d1af4f13a54120bcbd53fcf21563T1027 · T1059.005
VBSb100d1af4f13a54120bcbd53fcf21563.deobfuscated.vbsT1059.005
No malware configuration was found at this point.
Trace COM ordonnée
UNKNWOWNmalicious
line 1huhuhuhuhuhuhuhuhuhuhu
b100d1af4f13a54120bcbd53fcf21563
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with EssentialSign in or create a free account to view the matching YARA rules.
Create a free account