This sample is a 2.9 MB VBScript. Malva.RE parsed it statically and found no known malware family, configuration or malicious signature. Static analysis extracted 57 embedded or derived files. It matches 39 YARA rules. Observed behaviours map to MITRE ATT&CK T1027, T1059.001 and T1059.005. Static analysis cannot prove a file is harmless: an unknown or heavily packed threat can go undetected. The file was parsed and decompiled, never executed.
- SHA256
- 4a98be1541936632c91c83fc71d7626ea2f0fdc37ef2407f72879b9353d19af4
- MD5
- b2099f5c1a832fb7ad799c24d66b3924
- Verdict
- No known threat found
- File type
- VBScript · 2.9 MB
Cite this report: https://app.malva.re/sha256/4a98be1541936632c91c83fc71d7626ea2f0fdc37ef2407f72879b9353d19af4
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.
bin
1Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.
ole:doc>scr:ps1~T1027~T1059.001
ole:doc>scr:ps1
ole:doc>scr:vbs~T1027~T1059.005
ole:doc>scr:vbs