Suspicious
Suspect

b45609ef7c74d58140bd864c13a16363

Share on LinkedIn
Print
VBScript
MD5: b45609ef7c74d58140bd864c13a16363
Size: 8.23 MB
text/vbscript

This sample is a 7.9 MB VBScript for which Malva.RE's static analysis did not establish a malicious verdict. Static analysis extracted 107 embedded or derived files. It matches 3 YARA rules. Observed behaviours map to MITRE ATT&CK T1059.007. The file was analysed statically: it was parsed and decompiled, never executed.

SHA256
44c55dd508b04f3e9a1efbd64b577f4dc0baa07ca3a090e6e227d3dcb724aa36
MD5
b45609ef7c74d58140bd864c13a16363
Verdict
Inconclusive
File type
VBScript · 7.9 MB
MITRE ATT&CK
T1059.007

Cite this report: https://app.malva.re/sha256/44c55dd508b04f3e9a1efbd64b577f4dc0baa07ca3a090e6e227d3dcb724aa36

Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.

AI analysis is available with Essential.
Unlock with Essential

File
Type
VBScript file
Size
8.23 MB · 8,232,448 B
First seen
2026-10-26 19:15 · 2 days ago
Last seen
2026-10-26 19:15 · 2 days ago
Last analysis
2026-10-26 19:15 · 2 days ago
Hashes
MD5 b45609ef7c74d58140bd864c13a16363 Sha1 4d1587508f9d372e47b48017de4d43d8647204ad Sha256 44c55dd508b04f3e9a1efbd64b577f4dc0baa07ca3a090e6e227d3dcb724aa36 Sha384 2299d1a0667a0e3a7633aadbb0475d29fdfc4ad7d605b57659ca8a0a2504f71c94eed58726618197d17fd82a490155de Sha512 a0863de5019920a4cb4c0592cd5be75f061d271100a856d6e51475ad9c14122899f5b04fbf53ecf75dabb97526c469fc05179967d0a48b0fe4e8b0be5404f1b8 SSDeep 49152:UZCKitd+vszAlozTy4g5z8+5eNBAkG8iAd4AHFphN/dBENJZvMdAem:4ihTy/OG8F4+FphN/d+lUd TLSH B986DF21B383C136D56D0177E968FE5E1938BE730B3102E777E8396E59B48C1A279B42

108 files
VBSb45609ef7c74d58140bd864c13a16363
STICH beta Structural Threat Infection Chain Hash

A content-independent fingerprint of the infection method: successive formats, internal objects and MITRE techniques from the initial file to each final payload.

Structural branches: 8 STICH kept: 2secondary ignored: 6
bin 4img 2

Decorative / non-determinant leaves (styles, themes, media, fonts, icons, plain text…) are summarized here instead of producing STICH Paths.

STICH Path = the fingerprint (canonical chain with techniques) STICH Shape = structure only Only determinant branches produce STICH Paths.
Path ole:doc>pe:dll~T1059.007>pe:rsrc>bin
Shape ole:doc>pe:dll>pe:rsrc>bin
technique4 nodes
Path ole:doc>pe:dll~T1059.007>bin
Shape ole:doc>pe:dll>bin
technique3 nodes

An error has occurred. This application may no longer respond until reloaded. Reload 🗙